CVE-2026-76145 Genians, Inc Genian SSL PNS Improper Privilege Management
Attackers can escalate to super administrator privileges and create OS accounts by manipulating permissions during CSV bulk user registration in Genian SSL PNS.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-76145?
CVE-2026-76145 is a high-severity vulnerability in Genians, Inc Genian SSL PNS (frodo-core), published on 1 Oct 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration
Weakness: CWE-269
Which versions are affected by CVE-2026-76145?
How do I fix CVE-2026-76145?
No fix has been published for CVE-2026-76145 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-76145 being exploited?
There is no known exploitation of CVE-2026-76145 in the wild and no public exploit code.
Sources
Also known as GHSA-65r3-pcc6-3h74.