Vulnerability in Genians, Inc Genian NAC 5.0.75 LTS Release

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.3

[ Description ]Official description

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• docs.genians.com/release/ko/advisories/GN-SA-2026-002.html
• github.com/genians/security-research/security/advisories/GHSA-qf3p-2jpg-3h95