Genian SSL PNS EUVD-2026-90487

Requires an authenticated account with sufficient privilege to perform CSV bulk user registration in Genian SSL PNS (CVSS PR:H). The attacker exploits the specific bulk-registration feature by manipulating the 'permission column' within the uploaded CSV; this administrative import function must be accessible to the attacker. Impact includes escalation to super administrator and forced creation of an OS-level account. Limiting factors: pre-existing high administrative privilege is mandatory (not an unauthenticated or low-privilege path), the CVSS AT:P indicates an additional non-default attack requirement, and exploitation is scoped to deployments actively using the CSV bulk user registration workflow.

This is an authenticated privilege-escalation flaw (CWE-269) in Genians' Genian SSL PNS, scored 7.5 by the reporting CNA (krcert/KISA) using CVSS 4.0 (AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L). The vector's PR:H confirms the attacker must already hold a high-privilege account capable of performing CSV bulk user registration, which sharply narrows the realistic attacker population to insiders or an adversary who has already compromised an administrative session - this is the single biggest limiting factor and explains why, despite full CIA impact, this is not an unauthenticated internet-facing break. The AT:P (attack requirement 'present') further signals a non-default precondition. No EPSS score, no CISA KEV listing, and no public POC were provided in the intelligence, so there is no evidence of active or automated exploitation; the only reference is the vendor's own GitHub security advisory. Net: a genuinely high-impact issue (super-admin escalation plus forced OS account creation implies host-level foothold and scope change) but gated behind existing high privilege, making it a real-but-targeted risk rather than a mass-exploitation priority. No conflicting signals were detected, though note the CVSS is 4.0 only - no 3.1 vector was supplied by the source.

An attacker who already controls a high-privilege Genian SSL PNS administrative account (or has hijacked one) uploads a crafted CSV during bulk user registration, tampering with the permission column to grant themselves super-administrator rights. The same operation forces creation of an OS-level account, giving the attacker a foothold on the underlying host. No public exploit code was identified at time of analysis.