CVE-2026-76144CWE-434unrestricted-file-upload

CVE-2026-76144

published October 1, 2026

CVSS
1.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch

The record
Technical detail
CVSS
1.8 · NONE
CVSS v4.0
1.8 · CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00103 · 1.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-10-01T09:17Z
References (1)
https://github.com/genians/security-research/security/advisories/GHSA-7c2x-ph7p-5m2f · [email protected]
EPSS history
Timeline
  • 03 OCT 03:46Z
    EPSS moved — → 0%
    epss
  • 01 OCT 04:53Z
    Genians, Inc Genian SSL PNS Unrestricted File Upload
    cvelistv5