CVE-2026-36182

CriticalCVSS 9.8

Published: 04/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

GNCC GP5 v7.1.76 uses a weak hashing algorithm to protect the root password. Attackers can perform a brute-force attack to obtain root credentials and escalate privileges.

Risk Assessment

Gaining root access to the device can lead to full system compromise, data theft, and further attacks within the network.

Recommendation

Update the GNCC GP5 software to the latest version that uses a strong hashing algorithm. If an update is unavailable, restrict device access and implement additional authentication mechanisms.

Original NVD description (English source)

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack.