CVE-2026-16520

HIGH

8.7

CVSS Score

Published: August 20, 2026 at 11:57 PM UTC

Updated: September 3, 2026 at 05:14 PM UTC

2 products affected across 1 vendorGenian NacGenian ZTNA

Using Genian NAC V4.0 by Genians?

Get instant alerts when new vulnerabilities affect Genian NAC V4.0 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.7

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175(Revision 150340); Genian NAC V5.0: from 5.0.0 before 5.0.65 LTS(Revision 150331), from 5.0.0 before 5.0.75 LTS(Revision 150330), from 5.0.0 before 5.0.87 Release Stable(Revision 150329), and from 5.0.0 before 5.0.88(Revision 150328); Genian ZTNA V6.0: from 6.0.0 before 6.0.26 LTS(Revision 150337), from 6.0.0 before 6.0.35 LTS(Revision 150336), from 6.0.0 before 6.0.47 Release Stable(Revision 150334), and from 6.0.0 before 6.0.48(Revision 150333).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Genian Nac · Genians

60%

4.0.0 ≤ v < 4.0.175(Revision 150340)5.0.0 ≤ v < 5.0.65 LTS(Revision 150331)5.0.0 ≤ v < 5.0.75 LTS(Revision 150330)5.0.0 ≤ v < 5.0.87 Release Stable(Revision 150329)5.0.0 ≤ v < 5.0.88(Revision 150328)4.0.0 5.0.0

Affected range stops below 4.0.175(Revision 150340), so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0.65 LTS(Revision 150331), so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0.75 LTS(Revision 150330), so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0.87 Release Stable(Revision 150329), so it looks safe — our inference, not a vendor statement

Affected range stops below 5.0.88(Revision 150328), so it looks safe — our inference, not a vendor statement

Genian ZTNA · Genians

60%

6.0.0 ≤ v < 6.0.26 LTS(Revision 150337)6.0.0 ≤ v < 6.0.35 LTS(Revision 150336)6.0.0 ≤ v < 6.0.47 Release Stable(Revision 150334)6.0.0 ≤ v < 6.0.48(Revision 150333)6.0.0

Affected range stops below 6.0.26 LTS(Revision 150337), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0.35 LTS(Revision 150336), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0.47 Release Stable(Revision 150334), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0.48(Revision 150333), so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

Source: cverecord

https://docs.genians.com/release/ko/advisories/GN-SA-2026-003.html

Source: cverecord

https://github.com/genians/security-research/security/advisories/GHSA-f6f5-wx2h-ccfw

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.7HIGHFSI

Vector?

Quick Info

StatusDEFERRED

CWE

CWE-20CWE-202

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card