# CVE-2026-82782: Contec CONPROSYS nano out-of-bounds write in remote I/O coupler

Source: https://junglewise.ai/threats/cve-2026-82782-contec-conprosys-nano-out-of-bounds-write-in-remote-i-o-coupler  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-82782 · Severity: medium · CVSS 4.3 · Published 2026-09-14

Contec CONPROSYS nano is a family of industrial remote I/O coupler and controller devices used in manufacturing and process automation systems. An out-of-bounds write vulnerability in certain nano Series devices can be triggered by sending a specially crafted network request, allowing a remote attacker to cause a denial-of-service condition that disrupts production systems.

Vendors: [Contec](https://junglewise.ai/threats/vendors/contec).

## Quick answers

**Is CVE-2026-82782 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-82782 being exploited in the wild.

**How severe is CVE-2026-82782?** Medium severity, with a CVSS score of 4.3, published 14 September 2026.

**Which products and versions are affected?** Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 versions prior to 1.61; Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 versions prior to 1.02; Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* versions prior to 1.82.

**Is there a fix for CVE-2026-82782?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-82782 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-82782?** Check whether you run Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type), Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) or Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a CWE-787 out-of-bounds write vulnerability affecting CONPROSYS nano Series devices. The vulnerability exists in the remote I/O coupler unit (server type) CPSN-MCB271-* and related models, triggered by receiving a specially crafted request over the network from an unauthenticated remote attacker. The flaw results in a denial-of-service condition, specifically limited availability impact. Affected versions prior to 1.82 (CPSN-MCB271-*), 1.02 (CPSN-EOB471EI-[]1), and 1.61 (CPSN-PCB271-S1-041) are vulnerable; patched versions addressing this issue are available.

## Affected products

- Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* versions prior to 1.82
- Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 versions prior to 1.02
- Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 versions prior to 1.61

## Timeline

- 2026-09-10: disclosed
- 2026-09-14: advisory

## References

- [https://jvn.jp/en/vu/JVNVU96551518/](https://jvn.jp/en/vu/JVNVU96551518/)
- [https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf](https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf)

## Related threats

- [Contec CONPROSYS nano plaintext password storage](https://junglewise.ai/threats/cve-2026-82783-contec-conprosys-nano-plaintext-password-storage)