VULNERABILITY INTELLIGENCE
CVE-2026-36178
CVSS score4.6 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive user data.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-212