CVE-2026-82781
MediumCVSS 5.4Summary
A cross-site scripting vulnerability exists in CONPROSYS nano Series. If exploited, an arbitrary script may be executed on a logged-in user's web browser.
Risk Assessment
An attacker may hijack a logged-in user's session or perform actions on their behalf in the device's web interface.
Recommendation
Update the device firmware to a version containing the fix and inform users about the risk of clicking untrusted links.
Other vulnerabilities in CONPROSYS nano Series
See all- CVE-2026-82783Medium
A plaintext storage of a password issue exists in CONPROSYS nano Series. An attacker with physical access to the product may obtain credentials.
- CVE-2026-82782Medium
An out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service (DoS) condition.
Original NVD description (English source)
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.