Genian ZTNA 6.0.48 (R-1) Release Notes (2026-07-06)
Last Updated: 2026-08-07
Security Vulnerability
Revision |
Key |
Components |
Description |
Affects Versions |
CVSS Score |
|---|---|---|---|---|---|
151664 |
WebUI |
SuperAdmin administrator takeover vulnerability due to querying the administrator list in an unauthenticated state and missing verification of CWP Passkey registration targets |
6.0.7 |
8.1 |
|
151618 |
WebUI |
An issue where the administrator ID list can be queried without authentication |
5.0.42, 6.0.0 |
5.3 |
|
151598 |
WebUI |
An issue where an XML External Entity (XXE) is possible during unauthenticated SAML ACS response parsing |
6.0.43, 5.0.83 |
3.7 |
|
151412 |
WebUI |
Improved a structure where settings values in an unexposed UI with menu restrictions can be queried using the REST API |
5.0.42, 6.0.7 |
2.7 |
|
150098 |
Center |
Encrypted processing for items stored in plain text in the CLOUD |
5.0.65 (LTS), 6.0.26 (LTS) |
0.0 |
|
150098 |
WebUI |
Issues where random file uploads and extension filters can be circumvented with administrative console auditor privileges |
5.0.20, 6.0.0 |
2.0 |
New Features and Improvements
Revision |
Key |
Components |
Description |
Affects Versions |
|---|---|---|---|---|
150173 |
SDP |
Improved so that the SDP controller/gateway can operate on one device |
||
150098 |
WebUI |
Remove width and height options with custom button (agent tray menu) options |
||
150098 |
Linux Agent |
Linux Agent adds Insights E (AV) data collection function to vaccine information collection plug-in |
||
150098 |
Center, ElasticSearch |
Added so that an index for the next month can be created in advance when cleaning up audit logs |
||
150098 |
Linux Agent, Zero Trust Security |
Linux Agent improved to perform agent integrity verification before attempting to connect to a VPN tunnel |
||
150098 |
Linux Agent |
Linux Agent applies ovpn file encryption and improves integrity verification to sha256 |
||
150098 |
Center |
Improved hash for ovpn file verification from sha1 to sha2 |
||
150098 |
WebUI |
A problem where internal system shell commands can be executed using a vulnerability in logic to support custom cryptographic algorithms |
5.0.44, 6.0.2 |
|
150098 |
Sensor |
Improved so that the sensor retries when executing an automatic upgrade command and fails, and leaves an accurate debug |
||
150098 |
Sensor |
Improved to send keepalive with cached information when the information is unknown due to DNS failure when sending keepavlie |
||
150098 |
SDP |
Add a command to specify the user's mid to SDP cli |
||
150098 |
SDP |
Developed to run SDP as part of the NAC package |
||
150098 |
Windows Agent |
Support for site-specific ZTNA network band separation (Windows) |
||
150098 |
Windows Agent |
[Operating system information collection plug-in] Improved to include operating system information-build version revisions |
||
150098 |
Linux Agent |
Linux Agent provides a ZTNA network connection function through a verifiable cryptographic algorithm |
||
150098 |
WebUI |
An issue where the temporary password issued is displayed on the screen when executing the password enforcement setting (temporary password issuance) in Administration > Users > List UI |
5.0.0, 6.0.0 |
|
150098 |
macOS Agent |
Provides a ZTNA network connection function through macOS verification cryptographic algorithms |
||
150098 |
Zero Trust Security |
Upgrading SDP keycloak version 25.0 to genian-keycloak |
||
150098 |
Windows Agent |
[PassNinxSSOv4 plugin] Development of a plug-in linked to PassNinX version 4.0 |
||
150098 |
Windows Agent |
Provides a ZTNA network connection function through a verification cryptographic algorithm |
||
150098 |
Zero Trust Security |
Improved to send some of the debug logs that occur during the operation of the broker VPN function to an audit log |
||
150098 |
Windows Agent |
Improved the VPN connection being disconnected due to automatic agent updates |
||
150098 |
Sensor |
Improved wording about sensor token input during initial product installation |
||
150098 |
WebUI |
Improved list table area height calculation logic for management screens with 1080p resolution or lower |
6.0.13 |
|
150098 |
Linux Agent |
Linux Agent adds the ability to collect patch information from RPM packages in the Linux Update plug-in |
Issues Fixed
Revision |
Key |
Components |
Description |
Affects Versions |
|---|---|---|---|---|
151785 |
Center |
Fixed a DB backup failure error when performing a tenant backup on the cloud |
6.0.48 (R-1), 5.0.88 (R-1) |
|
151546 |
Windows Agent |
Malfunction problem when removing some risk policies after ad hoc dangerous network connection+incorrect gateway settings on the agent |
5.0.0, 6.0.0 |
|
151432 |
ElasticSearch |
An issue where sending an audit log alarm does not work properly |
6.0.46, 5.0.86 |
|
150098 |
WebUI |
A problem where the site name is displayed as null when applying the policy when setting the ZTNA connection manager plug-in |
6.0.0 |
|
150098 |
Windows Agent |
[Agent] Improve symptoms of repeated Gnstart.exe restarts |
5.0.0, 6.0.0 |
|
150098 |
WebUI |
A problem where the user's device authentication restrictions cannot be modified when only the password can be modified in the information synchronization settings |
6.0.41, 5.0.81 |
|
150098 |
Windows Agent |
An issue where the agent closes abnormally when searching for a password in the agent authentication window |
6.0.43, 5.0.83 |
|
150098 |
Windows Agent |
Agent Authentication Window Plugin] Fixed the issue where the bottom of the 'User Registration Page' button gets pushed down when Title Bar Generation is set to On |
5.0.17, 6.0.0 |
|
150098 |
Windows Agent |
An issue where the ZTNA Connection Manager logo image is not centered |
6.0.7 |
|
150098 |
Center |
A problem where information such as applicant ID and user ID is recorded in the audit log recorded when the IP is automatically returned |
6.0.21, 5.0.61 |
|
150098 |
Windows Agent |
An issue where SDP authentication fails intermittently |
6.0.39 |
|
150098 |
macOS Agent |
macOS Device Control APFS USB not being able to control the problem |
6.0.28, 5.0.68 |
|
150098 |
MySQL, Ubuntu(Debian) |
[General-purpose OS] Check for errors in files related to MySQL during initial installation of Ubuntu |
6.0.40, 5.0.80 |
|
150098 |
Windows Agent |
[Agent] Improved the issue where the tray menu Remote PC Power On (WOL) is enabled even when the remote PC power option is off |
5.0.19, 6.0.0 |
|
150098 |
ElasticSearch |
|
6.0.23, 5.0.63 |
|
150098 |
WebUI |
A problem where policies are applied through direct access to the 'Policy Application' URL with auditor authority |
6.0.16, 5.0.55, 5.0.56, 6.0.18, 5.0.58 |
|
150098 |
WebUI |
[CC] System > Update Management > Software > Error when uploading manually |
6.0.39 |
|
150098 |
WebUI |
Modified so that when requesting tag assignment via REST API, no error occurs even if seconds (ss) are included in the tag release time and it is applied up to yyyy-mm-dd hh:mm |
5.0.36 |
|
150098 |
Center |
An issue where delivery fails when sending an email containing an attachment |
5.0.16, 6.0.0 |
|
150098 |
SoftEtherVpn |
The problem of not being able to connect to VPN due to missing data-ciphers in configure when using the VPN aria algorithm |
||
150098 |
Authsync |
A problem where part of the initial fixed value setting method is not applied when using the information synchronization REST API method |
6.0.29, 5.0.69 |
|
150098 |
gnlogin |
CoreOS - An issue where you cannot connect to that port when changing the ssh port via gnlogin |
6.0.45, 5.0.85 |
|
150098 |
Windows Agent |
A problem where MAC information is registered as “00:00:00:00:00:00” as a node on a PC using a virtual interface |
6.0.0 |
|
150098 |
WebUI |
Bottom button and content overlap error due to missing class in some dialogs |
6.0.18 |