Is CVE-2026-82778 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82778 being exploited in the wild.

How severe is CVE-2026-82778?

Medium severity, with a CVSS score of 4.3, published 14 September 2026.

Which products and versions are affected?

Contec CONPROSYS PAC Series prior to 3.0.0.

Is there a fix for CVE-2026-82778?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82778 attacked?

It is attacked over the network.

Am I affected by CVE-2026-82778?

Check whether you run Contec CONPROSYS PAC Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82778: Contec CONPROSYS PAC Series directory listing information disclosure

CVE-2026-82778 · Severity: medium · CVSS 4.3 · Published 2026-09-14

Contec CONPROSYS PAC Series is an industrial automation product used in manufacturing and process control environments. A flaw in the product allows unauthenticated remote attackers to access directory listings through a specific URL, potentially exposing sensitive file paths, configuration details, and other operational information that could be used to plan further attacks.

Vendors: Contec.

Quick answers

Is CVE-2026-82778 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82778 being exploited in the wild.
How severe is CVE-2026-82778?: Medium severity, with a CVSS score of 4.3, published 14 September 2026.
Which products and versions are affected?: Contec CONPROSYS PAC Series prior to 3.0.0.
Is there a fix for CVE-2026-82778?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82778 attacked?: It is attacked over the network.
Am I affected by CVE-2026-82778?: Check whether you run Contec CONPROSYS PAC Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-82778 is an exposure of information through directory listing vulnerability (CWE-548) in CONPROSYS PAC Series. The vulnerability allows a remote unauthenticated attacker to enumerate directories and access directory listings without authentication by accessing a specific URL on the product. The attack requires only network access with no authentication or special preconditions. An attacker can obtain sensitive directory information that may disclose file names, paths, and system configuration. Patches are available in version 3.0.0 and later for both the Integrated Type (CPS-PC341-*-9201) and Configurable type (CPS-PCS341-DS1-1201) products.

Affected products

Contec CONPROSYS PAC Series prior to 3.0.0

Timeline

2026-09-14: disclosed
2026-09-10: advisory: JVNVU#96551518 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.