Genian NAC 6.0.48 Release Notes (2026-07-06)
Last Updated: 2026-08-07
Security Vulnerability
Revision |
Key |
Components |
Description |
Affects Versions |
CVSS Score |
|---|---|---|---|---|---|
151664 |
WebUI |
SuperAdmin administrator takeover vulnerability due to querying the administrator list in an unauthenticated state and missing verification of CWP Passkey registration targets |
6.0.7 |
8.1 |
|
151618 |
WebUI |
An issue where the administrator ID list can be queried without authentication |
5.0.42, 6.0.0 |
5.3 |
|
151598 |
WebUI |
An issue where an XML External Entity (XXE) is possible during unauthenticated SAML ACS response parsing |
6.0.43, 5.0.83 |
3.7 |
|
151412 |
WebUI |
Improved a structure where settings values in an unexposed UI with menu restrictions can be queried using the REST API |
5.0.42, 6.0.7 |
2.7 |
|
150098 |
Linux Agent |
Linux Agent improves room for local privilege escalation through password change GUI |
|||
150098 |
Center |
Encrypted processing for items stored in plain text in the CLOUD |
5.0.65 (LTS), 6.0.26 (LTS) |
0.0 |
|
150098 |
WebUI |
Issues where random file uploads and extension filters can be circumvented with administrative console auditor privileges |
5.0.20, 6.0.0 |
2.0 |
New Features and Improvements
Revision |
Key |
Components |
Description |
Affects Versions |
|---|---|---|---|---|
151921 |
Enforcer |
Improved so that host mode and local mirror mode can be used on one sensor device |
6.0.31, 5.0.71 |
|
150173 |
SDP |
Improved so that the SDP controller/gateway can operate on one device |
||
150098 |
WebUI |
Remove width and height options with custom button (agent tray menu) options |
||
150098 |
Linux Agent |
Linux Agent adds Insights E (AV) data collection function to vaccine information collection plug-in |
||
150098 |
Center, ElasticSearch |
Added so that an index for the next month can be created in advance when cleaning up audit logs |
||
150098 |
Linux Agent, Zero Trust Security |
Linux Agent improved to perform agent integrity verification before attempting to connect to a VPN tunnel |
||
150098 |
Linux Agent |
Linux Agent applies ovpn file encryption and improves integrity verification to sha256 |
||
150098 |
Center |
Improved hash for ovpn file verification from sha1 to sha2 |
||
150098 |
WebUI |
A problem where internal system shell commands can be executed using a vulnerability in logic to support custom cryptographic algorithms |
5.0.44, 6.0.2 |
|
150098 |
Sensor |
Improved so that the sensor retries when executing an automatic upgrade command and fails, and leaves an accurate debug |
||
150098 |
Sensor |
Improved to send keepalive with cached information when the information is unknown due to DNS failure when sending keepavlie |
||
150098 |
SDP |
Add a command to specify the user's mid to SDP cli |
||
150098 |
SDP |
Developed to run SDP as part of the NAC package |
||
150098 |
Windows Agent |
Support for site-specific NAC 6.0 network band separation (Windows) |
||
150098 |
Windows Agent |
[Operating system information collection plug-in] Improved to include operating system information-build version revisions |
||
150098 |
Linux Agent |
Linux Agent provides a NAC 6.0 network connection function through a verifiable cryptographic algorithm |
||
150098 |
WebUI |
An issue where the temporary password issued is displayed on the screen when executing the password enforcement setting (temporary password issuance) in Administration > Users > List UI |
5.0.0, 6.0.0 |
|
150098 |
macOS Agent |
Provides a NAC 6.0 network connection function through macOS verification cryptographic algorithms |
||
150098 |
Zero Trust Security |
Upgrading SDP keycloak version 25.0 to genian-keycloak |
||
150098 |
Windows Agent |
[PassNinxSSOv4 plugin] Development of a plug-in linked to PassNinX version 4.0 |
||
150098 |
Windows Agent |
Provides a NAC 6.0 network connection function through a verification cryptographic algorithm |
||
150098 |
Zero Trust Security |
Improved to send some of the debug logs that occur during the operation of the broker VPN function to an audit log |
||
150098 |
Windows Agent |
Improved the VPN connection being disconnected due to automatic agent updates |
||
150098 |
Sensor |
Improved wording about sensor token input during initial product installation |
||
150098 |
WebUI |
Improved list table area height calculation logic for management screens with 1080p resolution or lower |
6.0.13 |
|
150098 |
Linux Agent |
Linux Agent adds the ability to collect patch information from RPM packages in the Linux Update plug-in |