CVE-2026-76147

MediumCVSS 5.9/10Last modified Oct 1, 2026

Description

A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code

Metrics

CVSS 4.0 5.9/10

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-22 CWE-807 CWE-862

Affected software

Vendor	Product	Versions
Genians, Inc	Genian NAC 4.0.175 Release	< 148817
Genians, Inc	Genian NAC 5.0.65 LTS Release	< 148816
Genians, Inc	Genian NAC 5.0.75 LTS Release	< 148815
Genians, Inc	Genian NAC 5.0.85 Release Stable	< 148814
Genians, Inc	Genian NAC 5.0.86 Release	< 148813
Genians, Inc	Genian ZTNA 6.0.26 LTS Release	< 148811
Genians, Inc	Genian ZTNA 6.0.35 LTS Release	< 148810
Genians, Inc	Genian ZTNA 6.0.45 Release Stable	< 148809
Genians, Inc	Genian ZTNA 6.0.46 Release	< 148807

References

Timeline

Published: Oct 1, 2026
Last modified: Oct 1, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-761488.4CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.CVE-2026-761494.6CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file.CVE-2026-76154.3The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due CVE-2026-761506.5Path traversal and missing authorization check in the replaceImageToExistImage service in Apache OFBiz through 24.09.07 on all platforms all CVE-2026-761514.6Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through CVE-2026-761526.5Path traversal and missing authorization check in the imageCrop and imageRotate services in Apache OFBiz through 24.09.07 on all platforms a CVE-2026-761547.3A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrar CVE-2026-761559.3Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative acce CVE-2026-761569.4OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator CVE-2026-761578.8Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allow CVE-2026-761589.3External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remot CVE-2026-761597.0Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows