CVE-2026-76146CWE-78command-injection

CVE-2026-76146

published October 1, 2026

CVSS
8.4
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely

The record
Technical detail
CVSS
8.4 · NONE
CVSS v4.0
8.4 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.01933 · 79.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-10-01T09:17Z
References (1)
https://github.com/genians/security-research/security/advisories/GHSA-2597-v98f-frhj · [email protected]
EPSS history
Timeline
  • 03 OCT 03:46Z
    EPSS moved — → 2%
    epss
  • 01 OCT 04:53Z
    Genians, Inc Genian SSL PNS OS Command Injection
    cvelistv5