Genians vulnerabilities (CVEs)

6 CVEs matched to Genians by name in NVD, none on CISA's Known Exploited list.

Back to the Genians profile · Alternatives to Genians · CVE RSS feed

Exploitation riskElevated risk

6 of 6 CVEs assessed

confirmed exploited

EPSS ≥ 10%

15%

highest single CVE

Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.

CVE-2023-40253 ↗EPSS 0.4%LEV ≥15%Elevated risk
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authenticat…
CVE-2023-40252 ↗EPSS 0.4%LEV ≥14%Elevated risk
Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Geni…
CVE-2023-40254 ↗EPSS 0.2%LEV ≥7.3%Low risk
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA a…
CVE-2023-40251 ↗EPSS 0.2%LEV ≥6.2%Low risk
Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allow…
CVE-2024-23843 ↗EPSS 0.3%LEV ≥5.9%Low risk
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This …

Recent changes

last 90 days

CVE-2023-40253 is now estimated at a 14% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗
CVE-2023-40252 is now estimated at a 14% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗

CVE severity over time

CVEs by year and severity

Count of matched CVEs by the year NVD published them.
Year	High	Medium	Low	Unscored	Total
2026	0	0	0	1	1
2024	0	0	1	0	1
2023	1	3	0	0	4

Highest EPSS scores

EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.

CVE	EPSS	Percentile
CVE-2026-16520	0.5%	45%
CVE-2023-40253	0.4%	35%
CVE-2023-40252	0.4%	33%
CVE-2024-23843	0.3%	16%
CVE-2023-40254	0.2%	8.6%
CVE-2023-40251	0.2%	5.2%

Known CVEs (6)

RSS ⇢

CVE-2026-16520 ↗2026
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injectio…
CVE-2024-23843 ↗LOW 2.22024
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC V5.0, Genians Genian NAC LTS V5.0.This issue affects Genian NAC V5.0: from V5.0…
CVE-2023-40252 ↗

How this is counted

CVEs come from the US National Vulnerability Database (NVD) and are matched to Genians by vendor name. A name match can include CVEs that concern a similarly named product, and can miss ones filed under another name. The count reflects how widely a vendor's software is deployed and examined as much as anything else, so it is not a measure of how secure the vendor is and should not be used to rank vendors. Latest CVE added here: 2026-08-25.
Known-exploited status comes from the CISA Known Exploited Vulnerabilities (KEV) catalog. Last checked: 2026-10-21.
Exploit probability (EPSS) comes from FIRST. Latest score date: 2026-10-20.