CVE-2026-76145— Genians, Inc Genian SSL PNS Improper Privilege Management
Quick assessment
Affected
Genians, Inc Genian SSL PNS (frodo-core)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Genian SSL PNS 中存在一个不当的权限管理漏洞，攻击者可通过在 CSV 批量用户注册过程中操纵“权限”字段，将自身权限提升至超级管理员级别，并强制创建操作系统账户。
Possible ATT&CK Techniques 2 AI
T1548.003 · Sudo and Sudo Caching T1098.003 · Additional Cloud Roles
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76145
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Genians, Inc Genian SSL PNS Improper Privilege Management
Source: CVE Program / CVE List V5
Vulnerability Description
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Genians, Inc | Genian SSL PNS (frodo-core) | 0 ~ 5.0.0 | - |
|
| Genians, Inc | Genian SSL PNS (watchcat-ui) | 0 ~ 5.0.0 | - |
|
II. Public POCs for CVE-2026-76145
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76145
请登录查看更多情报信息。
Other References for CVE-2026-76145 (1)
Same Patch Batch · Genians, Inc · 2026-10-01 · 6 CVEs total
| CVE-2026-76142 | 9.3 CRITICAL | Genians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface |
| CVE-2026-76146 | 8.4 HIGH | Genians, Inc Genian SSL PNS OS Command Injection |
| CVE-2026-76143 | 7.3 HIGH | Genians, Inc Genian SSL PNS Multi Factor Authentication Bypass |
| CVE-2026-76147 | 5.9 MEDIUM | Genians, Inc Genian NAC/ZTNA Remote Code Execution |
| CVE-2026-76144 | 1.8 LOW | Genians, Inc Genian SSL PNS Unrestricted File Upload |
IV. Related Vulnerabilities
Same vendor: Genians, Inc
-
CVE-2026-76147
Genians, Inc Genian NAC/ZTNA Remote Code Execution -
CVE-2026-76146
Genians, Inc Genian SSL PNS OS Command Injection -
CVE-2026-76143
Genians, Inc Genian SSL PNS Multi Factor Authentication Bypa -
CVE-2026-76144
Genians, Inc Genian SSL PNS Unrestricted File Upload -
CVE-2026-76142
Genians, Inc. Genian NAC/ZTNA Improper Access Control on the
Same weakness: CWE-269
V. Comments for CVE-2026-76145
No comments yet