MalHyuk - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/actors/malhyuk/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 02:20:48 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgGenians Genian NAC/ZTNA authentication bypass (CVE-2026-76142)https://feed.craftedsignal.io/briefs/2026-11-genian-nac-auth-bypass/Fri, 06 Nov 2026 02:20:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-genian-nac-auth-bypass/A critical unauthenticated IPC routing flaw (CVE-2026-76142) in Genian NAC and ZTNA allows remote attackers to perform arbitrary actions, including service disruption and unauthorized email relaying.Genian NAC and ZTNA products contain a critical vulnerability where the internal gnrpcsvc SOAP handler, exposed via an Apache reverse proxy, lacks authentication. The service was designed for trusted internal IPC, and the misconfiguration allows unauthenticated external requests to trigger internal functions with elevated authority. The vulnerability was disclosed with a working Proof of Concept (PoC) on 2026-11-05.

Impact

Successful exploitation allows remote, unauthenticated attackers to perform several high-impact actions:

  • Unauthorized email relaying through organizational SMTP infrastructure (impersonation/phishing).
  • Service control, including stop/restart commands (denial of service/NAC bypass).
  • Disclosure of sensitive information regarding managed nodes.

Recommendation

  • Patch Genian NAC and ZTNA to versions greater than 5.0.75 LTS immediately per the vendor advisory (GHSA-qf3p-2jpg-3h95).
  • Review and tighten the Apache reverse proxy configuration to restrict access to the /gnrpcsvc URI path, ensuring it is not accessible from external network interfaces.
  • Implement internal caller validation within the centerd process and associated IPC handlers as a defense-in-depth measure.
]]>criticalthreat