CVE-2021-26622

10.0 criticalEPSS 3.0%

Critical (10.0) in genians genian nac. EPSS 3.0% chance of exploitation in the next 30 days.

An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWEs: CWE-94, CWE-20
Published: 2022-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

genians:genian_nac

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66580
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66580

Check your stack JSON