CVE-2026-82779

HighCVSS 8.8

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.02%

62th percentile - higher than 62% of all known CVEs

Summary

An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in CONPROSYS TM Series. An attacker who can log in to the product may execute arbitrary OS commands.

Risk Assessment

An authenticated attacker can execute arbitrary operating system commands on the device, potentially leading to full compromise. The risk affects CONPROSYS TM Series devices.

Recommendation

Restrict management interface access to trusted networks and change default credentials. Check for vendor updates and apply them promptly.

Other vulnerabilities in CONPROSYS TM Series

CVE-2026-82780High
An unrestricted upload of a file with a dangerous type exists in CONPROSYS TM Series. A remote authenticated attacker can upload a specially crafted file, potentially leading to arbitrary command execution on the product.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS