CVE-2026-82770

HighCVSS 8.8

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

39th percentile - higher than 39% of all known CVEs

Summary

A buffer overflow vulnerability exists in Contec RP-WAH-SR Series. A remote attacker can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution.

Risk Assessment

This vulnerability may allow an unauthenticated remote attacker to execute arbitrary code in the context of the web service, risking full compromise of the device.

Recommendation

Update the Contec RP-WAH-SR Series firmware to a patched version as soon as possible and restrict access to the web service from untrusted networks.

Other vulnerabilities in Contec RP-WAH-SR Series

CVE-2026-82769Medium
A cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.

Original NVD description (English source)

Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS