CVE-2021-26622: Genians Genian Nac

Critical severity, CVSS 10.0. EPSS: 3% chance of exploitation in the next 30 days.

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability.

Affected products

• Genians Genian Nac: from 4.0, up to and including 4.0.145.0831; from 5.0, up to and including 5.0.42.0827

Published 2022-03-25. Last modified 2026-06-17.