This vulnerability (CVE-2026-76144) in Genian SSL PNS (frodo-core) is due to insufficient validation of file extensions and file integrity during upload, enabling an attacker with high privileges to upload potentially dangerous files that are not official patches. The affected versions are all releases prior to 5.0.0. The CVSS 4.0 vector indicates local attack vector, high attack complexity, prerequisite privileges, no user interaction, and low impact on confidentiality and integrity. No vendor advisory or patch information is provided.

An attacker with high privileges on the local system can upload files with dangerous types that are not official patches, potentially leading to unauthorized file placement or execution. However, the overall impact is limited as reflected by the low CVSS score (1.8), indicating low confidentiality, integrity, and availability impact. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions to trusted users only and monitor for unauthorized file uploads. Avoid uploading files from untrusted sources. No official patch or workaround is currently documented.