CVE-2026-82791

HighCVSS 8.8

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.02%

62th percentile - higher than 62% of all known CVEs

Summary

An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. An attacker who can log in to the product may execute arbitrary OS commands.

Risk Assessment

An authenticated attacker can execute arbitrary operating system commands on the device, potentially leading to full compromise. The risk affects Contec CAN 2.0B Communication Wireless LAN / USB Converter Units.

Recommendation

Restrict management interface access to trusted networks and change default credentials. Check for vendor updates and apply them promptly.

Other vulnerabilities in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit

CVE-2026-82793High
An unrestricted upload of a file with a dangerous type exists in the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. A remote authenticated attacker can upload a specially crafted file, potentially leading to arbitrary code execution on the product.

Original NVD description (English source)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS