CVE-2026-82772

HighCVSS 8.8

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

39th percentile - higher than 39% of all known CVEs

Summary

A buffer overflow vulnerability exists in Contec EC1000 series. A remote attacker can send a specially crafted request to the product's web service, potentially leading to arbitrary program execution.

Risk Assessment

A remote attacker can trigger a buffer overflow and execute arbitrary programs, taking control of the device. The risk affects Contec EC1000 series devices with an exposed web service.

Recommendation

Restrict access to the device's web service to trusted networks only. Check for vendor patches and apply them promptly.

Other vulnerabilities in Contec EC1000 series

CVE-2026-82771Medium
A cross-site scripting vulnerability exists in Contec EC1000 series. If exploited, an arbitrary script may be executed in a logged-in user's web browser.

Original NVD description (English source)

Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS