CVE-2026-82793

HighCVSS 7.2

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

29th percentile - higher than 29% of all known CVEs

Summary

An unrestricted upload of a file with a dangerous type exists in the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. A remote authenticated attacker can upload a specially crafted file, potentially leading to arbitrary code execution on the product.

Risk Assessment

A remote authenticated attacker can upload a malicious file and execute arbitrary code, taking control of the device. The risk affects Contec CAN 2.0B Communication Wireless LAN / USB Converter Units.

Recommendation

Restrict file upload functionality to trusted users and networks only. Check for vendor patches and apply them promptly.

Other vulnerabilities in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit

CVE-2026-82791High
An improper neutralization of special elements used in an OS command ('OS Command Injection') exists in the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. An attacker who can log in to the product may execute arbitrary OS commands.

Original NVD description (English source)

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS