CVE-2026-82771

MediumCVSS 5.4

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

A cross-site scripting vulnerability exists in Contec EC1000 series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.

Risk Assessment

An attacker could hijack a logged-in user's session or perform unauthorized operations in the device interface. This may compromise the confidentiality and integrity of the configuration.

Recommendation

Update Contec EC1000 series devices to a patched version and restrict administrative panel access to trusted networks.

Other vulnerabilities in Contec EC1000 Series

CVE-2026-82772High
A buffer overflow vulnerability exists in Contec EC1000 series. A remote attacker can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution.

Original NVD description (English source)

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS