CVE-2026-36178

Published: Giu 04, 2026 Last Modified: Giu 04, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Attack Vector: physical

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: none

Availability: none

Description

AI Translation Available

The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, possibly allowing attackers to recover and obtain sensitive user data.

212

Improper Removal of Sensitive Information Before Storage or Transfer

Incomplete

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Confidentiality

Potential Impacts:

Read Files Or Directories Read Application Data

Applicable Platforms

All platforms may be affected

View CWE Details

https://github.com/BadChemical/IoT-Vulnerability-Research-P…

https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/GNCC…

http://gncc.com

http://gp5.com