The vulnerability CVE-2026-36180 affects GNCC GP5 version 7.1.76. It arises from insufficient runtime integrity checks, permitting attackers with physical proximity to the device to bypass file system read-only protections. By leveraging a bind-mount attack, an attacker can modify system files and binaries for the duration of the boot session. The CVSS vector indicates the attack requires physical access (AV:P), has low attack complexity (AC:L), requires no privileges (PR:N), no user interaction (UI:N), and impacts integrity (I:H) without affecting confidentiality or availability. There is no known exploit in the wild and no official remediation or patch has been published.

An attacker with physical access can bypass file system read-only protections and modify system files and binaries during a boot session. This compromises system integrity but does not affect confidentiality or availability. The impact is limited to the duration of the boot session and requires physical proximity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to affected devices and monitor for unauthorized physical interactions. No official remediation or temporary fix has been published.