CVE-2026-82769

MediumCVSS 5.4

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

A cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.

Risk Assessment

An attacker could hijack a logged-in user's session or perform unauthorized operations in the device interface. This may lead to configuration changes or data exposure.

Recommendation

Update Contec RP-WAH-SR Series devices to a patched version and restrict web interface access to trusted networks.

Other vulnerabilities in Contec RP-WAH-SR Series

CVE-2026-82770High
A buffer overflow vulnerability exists in Contec RP-WAH-SR Series. A remote attacker can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution.

Original NVD description (English source)

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS