CVE-2026-82776
MediumCVSS 6.1Summary
A cross-site scripting vulnerability exists in CONPROSYS PAC Series. If exploited, an arbitrary script may be executed on a logged-in user's web browser.
Risk Assessment
An attacker may hijack a logged-in user's session or perform actions on their behalf in the device's web interface.
Recommendation
Update the device firmware to a version containing the fix and inform users about the risk of clicking untrusted links.
Other vulnerabilities in CONPROSYS PAC Series
See all- CVE-2026-82778Medium
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL may allow a remote unauthenticated attacker to obtain the directory list without authentication.
- CVE-2026-82777High
An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in CONPROSYS PAC Series. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.