High severity7.1NVD Advisory· Published Jun 4, 2026· Updated Jun 4, 2026

CVE-2026-36176

Description

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Badchemical/Iot Vulnerability Research Publicreferences
GNCC/GP5llm-fuzzy
Range: =7.1.76

Patches

Vulnerability mechanics

References

gncc.comnvd
gp5.comnvd
github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/GNCC-GP5-T23/README.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000