CVE-2026-82765
HighCVSS 8.1Summary
A path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.
Risk Assessment
This vulnerability allows an attacker with FTP access to read and modify arbitrary files on the server, potentially leading to data leakage or system integrity compromise.
Recommendation
Update Contec FX5000/FX4000/FX3000 series to a patched version and restrict FTP access to trusted networks and accounts only.
Other vulnerabilities in Contec FX5000/FX4000/FX3000 series
See all- CVE-2026-82763Medium
A cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.
- CVE-2026-82762High
An OS Command Injection issue exists in Contec FX5000 series, FX4000 series, and FX3000 series due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.