CVE-2026-36180
Deferred Deferred - Pending Action
Runtime Integrity Bypass in GNCC GP5 v7.1.76

Publication date: 2026-06-04

Last updated on: 2026-06-04

Assigner: MITRE

Description
A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot session via a bind-mount attack.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-04
Last Modified
2026-06-04
Generated
2026-06-04
AI Q&A
2026-06-04
EPSS Evaluated
N/A
NVD
CVE-2026-36180
EUVD
EUVD-2026-34281
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
gncc gp5 7.1.76
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a lack of runtime integrity in GNCC GP5 version 7.1.76. It allows attackers who are physically close to the device to bypass the file system's read-only protections. They can do this by using a bind-mount attack to modify system files and binaries during the current boot session.


How can this vulnerability impact me? :

The impact of this vulnerability is that an attacker with physical proximity can alter critical system files and binaries temporarily. This could compromise the integrity and security of the system during the boot session, potentially allowing unauthorized actions or system manipulation.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart