Search
Find a vulnerability
Search criteria
8 vulnerabilities found for FXS5021 by Contec Co., Ltd.
CVE-2026-82765 (GCVE-0-2026-82765)
Vulnerability from nvd – Published: 2026-09-14 06:45 – Updated: 2026-09-14 14:51
VLAI
EPSS
VEX
Summary
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 14:51 UTC
CWE
- CWE-23 - Relative path traversal
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82765",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T14:51:39.805889Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T14:51:54.016Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-23",
"description": "Relative path traversal",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:01:03.113Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82765",
"datePublished": "2026-09-14T06:45:44.236Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T14:51:54.016Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82764 (GCVE-0-2026-82764)
Vulnerability from nvd – Published: 2026-09-14 06:37 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:10 UTC
CWE
- CWE-352 - Cross-site request forgery (CSRF)
Assigner
References
Impacted products
33 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | SGA1000 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR1 |
Affected:
0 , < 1.03
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR2 |
Affected:
0 , < 1.03
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR12 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR22 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECE1000 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECE1020 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECS1020 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* |
Affected:
0 , < 1.82
(semver)
|
|
| Contec Co., Ltd. | Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 |
Affected:
0 , < 1.61
(semver)
|
|
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF |
Affected:
0 , < 1.01.00
(semver)
|
|
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF-US |
Affected:
0 , < 1.01.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82764",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:10:02.905024Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:50.218Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SGA1000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR1",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.03",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR2",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.03",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR12",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR22",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECE1000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECE1020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECS1020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.82",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.61",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "PC-HELPER Wireless I/O DIO-0404RY-LWF",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.01.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "PC-HELPER Wireless I/O DIO-0404RY-LWF-US",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.01.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "Cross-site request forgery (CSRF)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:59.406Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf"
},
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_ph_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU96551518/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU90314828/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82764",
"datePublished": "2026-09-14T06:37:13.065Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:50.218Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82763 (GCVE-0-2026-82763)
Vulnerability from nvd – Published: 2026-09-14 06:44 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:04 UTC
CWE
- CWE-79 - Cross-site scripting (XSS)
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82763",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:04:36.239605Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:46.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user\u0027s web browser."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross-site scripting (XSS)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:55.097Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82763",
"datePublished": "2026-09-14T06:44:29.787Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:46.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82762 (GCVE-0-2026-82762)
Vulnerability from nvd – Published: 2026-09-14 06:36 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:10 UTC
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS Command Injection')
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82762",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:10:36.250352Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:50.358Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027) issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:42.408Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82762",
"datePublished": "2026-09-14T06:36:14.795Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:50.358Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82765 (GCVE-0-2026-82765)
Vulnerability from cvelistv5 – Published: 2026-09-14 06:45 – Updated: 2026-09-14 14:51
VLAI
EPSS
VEX
Summary
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 14:51 UTC
CWE
- CWE-23 - Relative path traversal
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82765",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T14:51:39.805889Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T14:51:54.016Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-23",
"description": "Relative path traversal",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:01:03.113Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82765",
"datePublished": "2026-09-14T06:45:44.236Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T14:51:54.016Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82763 (GCVE-0-2026-82763)
Vulnerability from cvelistv5 – Published: 2026-09-14 06:44 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:04 UTC
CWE
- CWE-79 - Cross-site scripting (XSS)
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82763",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:04:36.239605Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:46.422Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user\u0027s web browser."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross-site scripting (XSS)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:55.097Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82763",
"datePublished": "2026-09-14T06:44:29.787Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:46.422Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82764 (GCVE-0-2026-82764)
Vulnerability from cvelistv5 – Published: 2026-09-14 06:37 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:10 UTC
CWE
- CWE-352 - Cross-site request forgery (CSRF)
Assigner
References
Impacted products
33 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | SGA1000 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR1 |
Affected:
0 , < 1.03
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR2 |
Affected:
0 , < 1.03
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR12 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | RP-WAH-SR22 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECE1000 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECE1020 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | ECS1020 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* |
Affected:
0 , < 1.82
(semver)
|
|
| Contec Co., Ltd. | Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 |
Affected:
0 , < 1.02
(semver)
|
|
| Contec Co., Ltd. | Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 |
Affected:
0 , < 1.61
(semver)
|
|
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF |
Affected:
0 , < 1.01.00
(semver)
|
|
| Contec Co., Ltd. | PC-HELPER Wireless I/O DIO-0404RY-LWF-US |
Affected:
0 , < 1.01.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82764",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:10:02.905024Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:50.218Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SGA1000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR1",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.03",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR2",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.03",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR12",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RP-WAH-SR22",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECE1000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECE1020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ECS1020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.82",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.02",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.61",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "PC-HELPER Wireless I/O DIO-0404RY-LWF",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.01.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "PC-HELPER Wireless I/O DIO-0404RY-LWF-US",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.01.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "Cross-site request forgery (CSRF)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:59.406Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf"
},
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_ph_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU96551518/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU90314828/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82764",
"datePublished": "2026-09-14T06:37:13.065Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:50.218Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-82762 (GCVE-0-2026-82762)
Vulnerability from cvelistv5 – Published: 2026-09-14 06:36 – Updated: 2026-09-14 11:19
VLAI
EPSS
VEX
Summary
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 11:10 UTC
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS Command Injection')
Assigner
References
2 references
Impacted products
20 products
| Vendor | Product | Version | |
|---|---|---|---|
| Contec Co., Ltd. | FXA5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXA5020-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5000-[][] |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXS5021 |
Affected:
0 , < 1.12.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXE4000-WP |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4000 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXS4020 |
Affected:
0 , < 1.14.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3020-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXA3200 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000 |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-[][] |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXE3000-WP |
Affected:
0 , < 1.20.00
(semver)
|
|
| Contec Co., Ltd. | FXS300[]-CN |
Affected:
0 , < 1.20.00
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82762",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T11:10:36.250352Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T11:19:50.358Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "FXA5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA5020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS5021",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.12.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE4000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS4020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.14.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3020-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXA3200",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-[][]",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXE3000-WP",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "FXS300[]-CN",
"vendor": "Contec Co., Ltd.",
"versions": [
{
"lessThan": "1.20.00",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027) issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "Improper neutralization of special elements used in an OS command (\u0027OS Command Injection\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T09:00:42.408Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf"
},
{
"url": "https://jvn.jp/en/vu/JVNVU99009004/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-82762",
"datePublished": "2026-09-14T06:36:14.795Z",
"dateReserved": "2026-08-31T02:30:58.276Z",
"dateUpdated": "2026-09-14T11:19:50.358Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}