CVE-2026-82777
HighCVSS 8.8Summary
An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in CONPROSYS PAC Series. An attacker who can log in to the product may execute arbitrary OS commands.
Risk Assessment
An authenticated attacker can execute arbitrary operating system commands on the device, potentially leading to full compromise. The risk affects CONPROSYS PAC Series devices.
Recommendation
Restrict management interface access to trusted networks and change default credentials. Check for vendor updates and apply them promptly.
Other vulnerabilities in CONPROSYS PAC Series
See all- CVE-2026-82778Medium
An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL may allow a remote unauthenticated attacker to obtain the directory list without authentication.
- CVE-2026-82776Medium
A cross-site scripting vulnerability exists in CONPROSYS PAC Series. If exploited, an arbitrary script may be executed on a logged-in user's web browser.
Original NVD description (English source)
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.