Is CVE-2026-76142 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-76142 being exploited in the wild.

How severe is CVE-2026-76142?

Informational severity, published 1 October 2026.

Which products and versions are affected?

Genian NAC 5.0.75 LTS (Revision 135823+), 5.0.85 (Revision 147181+), 5.0.86 (Revision 148018+); Genian ZTNA 6.0.35 LTS (Revision 135814+), 6.0.45 (Revision 147169+), 6.0.46 (Revision 148028+).

Is there a fix for CVE-2026-76142?

Yes: fixed in Genian NAC 5.0.75 LTS (Revision 148667+), 5.0.85 (Revision 148666+), 5.0.86 (Revision 148665+); Genian ZTNA 6.0.35 LTS (Revision 148672+), 6.0.45 (Revision 148671+), 6.0.46 (Revision 148670+). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-76142 attacked?

It is attacked over the network.

Am I affected by CVE-2026-76142?

Check whether you run Genian NAC or Genian ZTNA at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-76142: Genian NAC/ZTNA unauthorized access to internal IPC endpoint

CVE-2026-76142 · Severity: info · Published 2026-10-01

Genian NAC and ZTNA are network access control and zero-trust network access solutions that manage device compliance and network security policy. An unauthenticated attacker can call an internal IPC SOAP endpoint if the policy server's internal RPC service is exposed externally through misconfiguration (typically via Apache ProxyPass). This allows an attacker to invoke internal functions that could modify policies, compromise network access controls, or execute unauthorized administrative actions.

Vendors: Genian.

Quick answers

Is CVE-2026-76142 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-76142 being exploited in the wild.
How severe is CVE-2026-76142?: Informational severity, published 1 October 2026.
Which products and versions are affected?: Genian NAC 5.0.75 LTS (Revision 135823+), 5.0.85 (Revision 147181+), 5.0.86 (Revision 148018+); Genian ZTNA 6.0.35 LTS (Revision 135814+), 6.0.45 (Revision 147169+), 6.0.46 (Revision 148028+).
Is there a fix for CVE-2026-76142?: Yes: fixed in Genian NAC 5.0.75 LTS (Revision 148667+), 5.0.85 (Revision 148666+), 5.0.86 (Revision 148665+); Genian ZTNA 6.0.35 LTS (Revision 148672+), 6.0.45 (Revision 148671+), 6.0.46 (Revision 148670+). Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-76142 attacked?: It is attacked over the network.
Am I affected by CVE-2026-76142?: Check whether you run Genian NAC or Genian ZTNA at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Genian NAC 5.0.75 LTS (Revision 148667+), 5.0.85 (Revision 148666+), 5.0.86 (Revision 148665+); Genian ZTNA 6.0.35 LTS (Revision 148672+), 6.0.45 (Revision 148671+), 6.0.46 (Revision 148670+)

Technical details

The vulnerability exists in the internal IPC SOAP endpoint (127.0.0.1:3870/ipc) of Centerd within Genian NAC and ZTNA policy servers, which lacks authentication and access control validation. When gnrpcsvc (port 9999) is exposed externally via Apache ProxyPass or similar reverse proxy configurations, an unauthenticated network attacker can directly invoke internal functions intended only for local inter-process communication. The attack requires no privilege escalation or user interaction and can result in unauthorized policy modification, integrity compromise, and potential service disruption.

Affected products

Genian NAC 5.0.75 LTS (Revision 135823+), 5.0.85 (Revision 147181+), 5.0.86 (Revision 148018+)
Genian ZTNA 6.0.35 LTS (Revision 135814+), 6.0.45 (Revision 147169+), 6.0.46 (Revision 148028+)

Timeline

2026-07-07: disclosed
2026-05-26: patched
2026-05-13: other: reported

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.