CVE-2026-82780

HighCVSS 8.8

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

An unrestricted upload of a file with a dangerous type exists in CONPROSYS TM Series. A remote authenticated attacker can upload a specially crafted file, potentially leading to arbitrary command execution on the product.

Risk Assessment

A remote authenticated attacker can upload a malicious file and execute arbitrary commands, taking control of the device. The risk affects CONPROSYS TM Series devices.

Recommendation

Restrict file upload functionality to trusted users and networks only. Check for vendor patches and apply them promptly.

Other vulnerabilities in CONPROSYS TM Series

CVE-2026-82779High
An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in CONPROSYS TM Series. An attacker who can log in to the product may execute arbitrary OS commands.

Original NVD description (English source)

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS