# CVE-2026-76144: Genian SSL PNS unrestricted file upload

Source: https://junglewise.ai/threats/cve-2026-76144-an-unrestricted-file-upload-vulnerability-caused-by-insufficient  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-01. Updated: 2026-10-05  
License: CC BY 4.0 with a link back

CVE-2026-76144 · Severity: info · Published 2026-10-01

Genian SSL PNS is a network security appliance that manages patch deployment and system updates. An attacker with administrative privileges can bypass file verification by renaming malicious files with legitimate patch extensions (.svi or .jar), allowing installation of unauthorized code that could compromise system integrity.

Vendors: [Genian](https://junglewise.ai/threats/vendors/genian).

## Quick answers

**Is CVE-2026-76144 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76144 being exploited in the wild.

**How severe is CVE-2026-76144?** Informational severity, published 1 October 2026.

**Which products and versions are affected?** Genian SSL PNS frodo-core before 5.0.0; Genian SSL PNS watchcat-ui before 5.0.0.

**Is there a fix for CVE-2026-76144?** Yes: fixed in frodo-core 5.0.0, watchcat-ui 5.0.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-76144 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-76144?** Check whether you run Genian SSL PNS frodo-core or Genian SSL PNS watchcat-ui at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in frodo-core 5.0.0, watchcat-ui 5.0.0

## Technical details

The vulnerability exists in the file upload process of Genian SSL PNS where the server performs insufficient verification of uploaded patch files. An authenticated attacker with high privileges can upload arbitrary files by spoofing file extensions (.svi or .jar) without integrity validation, allowing installation of unauthorized code. The attack requires local access, high privileges, and high attack complexity, limiting real-world impact.

## Affected products

- Genian SSL PNS frodo-core before 5.0.0
- Genian SSL PNS watchcat-ui before 5.0.0

## Timeline

- 2026-07-10: disclosed
- 2026-06-08: patched
- 2026-04-08: other: reported

## References

- [https://github.com/genians/security-research/security/advisories/GHSA-7c2x-ph7p-5m2f](https://github.com/genians/security-research/security/advisories/GHSA-7c2x-ph7p-5m2f)