Genian Nac V5 0
Monthly
SQL injection and authentication bypass in Genians Genian NAC (V4.0, V5.0) and ZTNA (V6.0) expose sensitive backend data to remote unauthenticated attackers via crafted data queries. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no special attack prerequisites, consistent with the authentication bypass tag. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, though the unauthenticated, low-complexity nature warrants prompt patching across all three product lines.
SQL injection and authentication bypass in Genians Genian NAC (V4.0, V5.0) and ZTNA (V6.0) expose sensitive backend data to remote unauthenticated attackers via crafted data queries. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no special attack prerequisites, consistent with the authentication bypass tag. No public exploit has been identified at time of analysis and this CVE is not listed in CISA KEV, though the unauthenticated, low-complexity nature warrants prompt patching across all three product lines.