PT-2026-46244 · Gncc · Gp5

Badchemical · Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-36175

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNCC GP5 version 7.1.76

Description An issue in the U-Boot component allows physically-proximate attackers to bypass authentication and gain root access. This is achieved by interrupting the boot sequence and injecting a crafted string into the kernel boot arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-20

CWE-288

Related Identifiers

CVE-2026-36175

Affected Products

Gp5

References · 5

• 🔥 https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/GNCC-GP5-T23/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-36175 · Security Note
• http://gncc.com · Note
• http://gp5.com · Note
• https://twitter.com/VulmonFeeds/status/2062586859713110203 · Twitter Post