CVE-2026-76142: Genian NAC/ZTNA pre-auth critical

CVE-2026-76142 identifies insufficient authentication and inadequate access control on the internal SOAP endpoint (gnrpcsvc) of the Genian NAC/ZTNA policy server. This vulnerability allows an unauthenticated attacker to invoke critical internal functions, compromising the integrity of access control systems and Zero Trust frameworks. Genian NAC/ZTNA is a widely deployed perimeter security and access control system used by organizations to enforce network policies and identity verification.

The vulnerability carries a CVSS score of 9.3 (critical). According to the official NVD description (published October 1, 2026), insufficient authentication on the internal SOAP endpoint represents a direct attack vector for unauthorized attackers. A public GitHub signal dated November 5, 2026 confirms the existence of repositories declaring they contain exploit code for this flaw and specifies that the fix is available from build 148665.

Administrators and security teams must immediately verify which version of Genian NAC/ZTNA is deployed. If prior to build 148665, schedule the update with highest priority. Examine logs of the internal SOAP endpoint (gnrpcsvc) for unauthorized access or exploitation attempts. Since this flaw enables unauthenticated access, any anomalies in logs represent a potential indicator of compromise.