Is CVE-2026-82783 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82783 being exploited in the wild.

How severe is CVE-2026-82783?

Medium severity, with a CVSS score of 4.2, published 14 September 2026.

Which products and versions are affected?

Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 prior to 1.61; Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-*1 prior to 1.02; Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* prior to 1.82.

Is there a fix for CVE-2026-82783?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-82783 attacked?

It is attacked with physical access, in a network appliance.

Am I affected by CVE-2026-82783?

Check whether you run Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type), Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) or Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82783: Contec CONPROSYS nano plaintext password storage

CVE-2026-82783 · Severity: medium · CVSS 4.2 · Published 2026-09-14

Contec CONPROSYS nano Series is a remote I/O coupler unit used in industrial control systems to manage input/output operations across networks. A vulnerability in the product stores authentication credentials in plaintext, allowing an attacker with physical access to the device to extract login credentials and gain unauthorized access to control the system or access sensitive data.

Vendors: Contec.

Quick answers

Is CVE-2026-82783 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82783 being exploited in the wild.
How severe is CVE-2026-82783?: Medium severity, with a CVSS score of 4.2, published 14 September 2026.
Which products and versions are affected?: Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 prior to 1.61; Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-*1 prior to 1.02; Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* prior to 1.82.
Is there a fix for CVE-2026-82783?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-82783 attacked?: It is attacked with physical access, in a network appliance.
Am I affected by CVE-2026-82783?: Check whether you run Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type), Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) or Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability (CWE-256) involves plaintext storage of credentials in the CONPROSYS nano Series remote I/O coupler units. An attacker with physical access to the affected device can retrieve stored passwords without authentication or special tools. The vulnerability affects multiple nano Series models including Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*, Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-*1, and Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041. Patches are available: versions prior to 1.82 (MCB271), 1.02 (EOB471EI), and 1.61 (PCB271) are affected; updated versions address the plaintext credential storage issue.

Affected products

Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* prior to 1.82
Contec CONPROSYS nano Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-*1 prior to 1.02
Contec CONPROSYS nano Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 prior to 1.61

Timeline

2026-09-14: disclosed: Vulnerability disclosed by Contec and published in JVNVU#96551518

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.