CVE-2026-76147: Genians, Inc Genian NAC/ZTNA Remote Code Execution

Published Oct 1, 2026

Updated

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code

Affected Software

1 affected component

Genians Genian NAC/ZTNA

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Genian NAC to a version that resolves this vulnerability.
Patch Revision 148817
Upgrade
Upgrade Genian NAC to a version that resolves this vulnerability.
Patch Revision 148816
Upgrade
Upgrade Genian NAC to a version that resolves this vulnerability.
Patch Revision 148815
Upgrade
Upgrade Genian NAC to a version that resolves this vulnerability.
Patch Revision 148814
Upgrade
Upgrade Genian NAC to a version that resolves this vulnerability.
Patch Revision 148813
Upgrade
Upgrade Genian ZTNA to a version that resolves this vulnerability.
Patch Revision 148811
Upgrade
Upgrade Genian ZTNA to a version that resolves this vulnerability.
Patch Revision 148810
Upgrade
Upgrade Genian ZTNA to a version that resolves this vulnerability.
Patch Revision 148809
Upgrade
Upgrade Genian ZTNA to a version that resolves this vulnerability.
Patch Revision 148807

Event History

Oct 1, 2026

CVE Published

via MITRE·04:53 AM

Data Sourced

via MITRE·04:53 AM

RemedyDescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that the attacker needs high privileges and can exploit the issue remotely without user interaction. Exploitation is rated as high complexity.

What is the expected impact if exploitation succeeds?

A successful attacker may execute arbitrary code through the agent upgrade feature. The CVSS impact metrics indicate high impact to integrity, with no indicated direct impact to confidentiality or availability.

Which feature should be prioritized for review or restriction?

Prioritize the agent upgrade feature, where insufficient authorization and integrity verification allow a ZIP Slip path traversal condition. Review who has privileged access to initiate or manage agent upgrades and restrict that access to trusted administrators.