CVE-2026-36182
Weak Hashing in GNCC GP5 v7.1.76 Allows Root Credential Exposure
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gncc | gp5 | 7.1.76 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in GNCC GP5 v7.1.76 involves the use of a weak hashing algorithm to protect the root password. This weakness may allow attackers to perform a bruteforce attack to obtain root credentials and privileges.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability involves the use of a weak hashing algorithm to protect the root password, which could allow attackers to obtain root credentials via a bruteforce attack.
This weakness in credential protection could lead to unauthorized access to sensitive systems or data, potentially resulting in violations of security requirements mandated by standards such as GDPR or HIPAA.
However, the provided information does not explicitly discuss the impact on compliance with these or other regulations.
What immediate steps should I take to mitigate this vulnerability?
The vulnerability involves the use of a weak hashing algorithm to protect the root password, which may allow attackers to obtain root credentials via bruteforce attacks.
Immediate mitigation steps should focus on strengthening password protection mechanisms, such as updating to a stronger hashing algorithm if possible.
Since no direct mitigation or patch information is provided, general best practices include restricting access to the device, monitoring for unauthorized access attempts, and changing root passwords regularly.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker to gain root access to the affected system by cracking the weakly hashed root password. This would give the attacker full control over the system, potentially leading to unauthorized access, data theft, or system compromise.