CVE-2026-82763
MediumCVSS 5.4Summary
A cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.
Risk Assessment
An attacker could hijack a logged-in user's session or perform unauthorized operations in the device interface. This may lead to configuration changes or data exposure.
Recommendation
Update Contec FX5000/FX4000/FX3000 series devices to a patched version and restrict web interface access to trusted networks.
Other vulnerabilities in Contec FX5000/FX4000/FX3000 Series
See all- CVE-2026-82765High
A path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.
- CVE-2026-82762High
An OS Command Injection issue exists in Contec FX5000 series, FX4000 series, and FX3000 series due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.