01 Record

CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL

HighPUBLISHEDCNA: FSI

Base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL

03 Metadata

Published

2026-08-20 23:57Z1 DAY AGO

Last updated

2026-08-21 20:08Z5 HR AGO

Reserved

2026-07-22

Assigning CNA

FSI

Record state

PUBLISHED

Severity

High (CVSS 8.7)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Weaknesses

CWE-20Improper Input ValidationClass
CWE-202Exposure of Sensitive Information Through Data QueriesBase

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

71b732dc12291c4baa67584aaed2a4681cd68684abab89dae87449d42fe85950

04 Affected products

VendorProductVersionsPlatforms

GeniansGenian NAC V4.04.0.0 to < 4.0.175(Revision 150340)—

GeniansGenian NAC V5.05.0.0 to < 5.0.65 LTS(Revision 150331), 5.0.0 to < 5.0.75 LTS(Revision 150330), 5.0.0 to < 5.0.87 Release Stable(Revision 150329), 5.0.0 to < 5.0.88(Revision 150328)—

GeniansGenian ZTNA V6.06.0.0 to < 6.0.26 LTS(Revision 150337), 6.0.0 to < 6.0.35 LTS(Revision 150336), 6.0.0 to < 6.0.47 Release Stable(Revision 150334), 6.0.0 to < 6.0.48(Revision 150333)—

05 References

docs.genians.comhttps://docs.genians.com/release/ko/advisories/GN-SA-2026-003.html
github.comhttps://github.com/genians/security-research/security/advisories/GHSA-f6f5-wx2h-ccfw