# Contec vulnerabilities Source: https://junglewise.ai/threats/vendors/contec Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/contec.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 35 vulnerabilities in Contec: 0 in the last 7 days and 35 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-82796, was published on 14 September 2026. Nothing in the last four weeks, down from 35 vulnerabilities in the four before. 0 critical against 1. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 35 - All time: 35 (1 critical, 0 exploited in the wild) ## About Contec Contec is a Japanese manufacturer of industrial computer and measurement devices. ## Latest Contec vulnerabilities - [CVE-2026-82796: Contec SolarView Compact cross-site scripting in Image Management](https://junglewise.ai/threats/cve-2026-82796-contec-solarview-compact-cross-site-scripting-in-image-management) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-82795: Contec SolarView Compact cross-site scripting in Schedule Settings](https://junglewise.ai/threats/cve-2026-82795-contec-solarview-compact-cross-site-scripting-in-schedule) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-82794: Contec SolarView Compact OS command injection in Schedule Settings](https://junglewise.ai/threats/cve-2026-82794-contec-solarview-compact-os-command-injection-in-schedule) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82793: Contec CAN 2.0B Converter unrestricted file upload](https://junglewise.ai/threats/cve-2026-82793-contec-can-2-0b-converter-unrestricted-file-upload) (high, CVSS 7.2, published 14 Sep 2026) - [CVE-2026-82792: Contec CAN 2.0B Communication Unit cross-site scripting](https://junglewise.ai/threats/cve-2026-82792-contec-can-2-0b-communication-unit-cross-site-scripting) (medium, CVSS 5.2, published 14 Sep 2026) - [CVE-2026-82791: Contec CAN 2.0B Communication Wireless LAN/USB Converter OS command injection](https://junglewise.ai/threats/cve-2026-82791-contec-can-2-0b-communication-wireless-lan-usb-converter-os) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82790: Contec PC-HELPER Wireless I/O cross-site scripting](https://junglewise.ai/threats/cve-2026-82790-contec-pc-helper-wireless-i-o-cross-site-scripting) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-82789: Contec CONPROSYS HMI System eval injection](https://junglewise.ai/threats/cve-2026-82789-contec-conprosys-hmi-system-eval-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82788: Contec CONPROSYS IO-Link Master cross-site scripting](https://junglewise.ai/threats/cve-2026-82788-contec-conprosys-io-link-master-cross-site-scripting) (medium, CVSS 6.1, published 14 Sep 2026) - [CVE-2026-82787: Contec CONPROSYS IO-Link Master missing authentication for critical function](https://junglewise.ai/threats/cve-2026-82787-contec-conprosys-io-link-master-missing-authentication-for) (critical, CVSS 9.8, published 14 Sep 2026) - [CVE-2026-82786: Contec CONPROSYS nano Remote I/O Coupler insufficiently protected credentials](https://junglewise.ai/threats/cve-2026-82786-contec-conprosys-nano-remote-i-o-coupler-insufficiently-protected) (medium, CVSS 6.3, published 14 Sep 2026) - [CVE-2026-82785: Contec CONPROSYS nano Remote I/O Coupler Unit stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-82785-contec-conprosys-nano-remote-i-o-coupler-unit-stack-based-buffer) (medium, CVSS 4.3, published 14 Sep 2026) - [CVE-2026-82784: Contec CONPROSYS nano Remote I/O Coupler auth bypass in REST API](https://junglewise.ai/threats/cve-2026-82784-contec-conprosys-nano-remote-i-o-coupler-auth-bypass-in-rest-api) (medium, CVSS 6.5, published 14 Sep 2026) - [CVE-2026-82783: Contec CONPROSYS nano plaintext password storage](https://junglewise.ai/threats/cve-2026-82783-contec-conprosys-nano-plaintext-password-storage) (medium, CVSS 4.2, published 14 Sep 2026) - [CVE-2026-82782: Contec CONPROSYS nano out-of-bounds write in remote I/O coupler](https://junglewise.ai/threats/cve-2026-82782-contec-conprosys-nano-out-of-bounds-write-in-remote-i-o-coupler) (medium, CVSS 4.3, published 14 Sep 2026) - [CVE-2026-82781: Contec CONPROSYS nano Series cross-site scripting](https://junglewise.ai/threats/cve-2026-82781-contec-conprosys-nano-series-cross-site-scripting) (medium, CVSS 5.4, published 14 Sep 2026) - [CVE-2026-82780: Contec CONPROSYS TM Series unrestricted file upload](https://junglewise.ai/threats/cve-2026-82780-contec-conprosys-tm-series-unrestricted-file-upload) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82779: Contec CONPROSYS TM Series OS command injection](https://junglewise.ai/threats/cve-2026-82779-contec-conprosys-tm-series-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82778: Contec CONPROSYS PAC Series directory listing information disclosure](https://junglewise.ai/threats/cve-2026-82778-contec-conprosys-pac-series-directory-listing-information) (medium, CVSS 4.3, published 14 Sep 2026) - [CVE-2026-82777: Contec CONPROSYS PAC OS command injection](https://junglewise.ai/threats/cve-2026-82777-contec-conprosys-pac-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82776: Contec CONPROSYS PAC Series cross-site scripting](https://junglewise.ai/threats/cve-2026-82776-contec-conprosys-pac-series-cross-site-scripting) (medium, CVSS 6.1, published 14 Sep 2026) - [CVE-2026-82775: Contec CONPROSYS M2M Gateway directory listing information disclosure](https://junglewise.ai/threats/cve-2026-82775-contec-conprosys-m2m-gateway-directory-listing-information) (medium, CVSS 4.3, published 14 Sep 2026) - [CVE-2026-82774: Contec CONPROSYS M2M Gateway OS command injection](https://junglewise.ai/threats/cve-2026-82774-contec-conprosys-m2m-gateway-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82773: Contec CONPROSYS M2M Gateway cross-site scripting](https://junglewise.ai/threats/cve-2026-82773-contec-conprosys-m2m-gateway-cross-site-scripting) (medium, CVSS 6.1, published 14 Sep 2026) - [CVE-2026-82772: Contec EC1000 buffer overflow in web service](https://junglewise.ai/threats/cve-2026-82772-contec-ec1000-buffer-overflow-in-web-service) (high, CVSS 8.8, published 14 Sep 2026) ## Most severe Contec vulnerabilities - [CVE-2026-82787: Contec CONPROSYS IO-Link Master missing authentication for critical function](https://junglewise.ai/threats/cve-2026-82787-contec-conprosys-io-link-master-missing-authentication-for) (critical, CVSS 9.8, published 14 Sep 2026) - [CVE-2026-82794: Contec SolarView Compact OS command injection in Schedule Settings](https://junglewise.ai/threats/cve-2026-82794-contec-solarview-compact-os-command-injection-in-schedule) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82791: Contec CAN 2.0B Communication Wireless LAN/USB Converter OS command injection](https://junglewise.ai/threats/cve-2026-82791-contec-can-2-0b-communication-wireless-lan-usb-converter-os) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82779: Contec CONPROSYS TM Series OS command injection](https://junglewise.ai/threats/cve-2026-82779-contec-conprosys-tm-series-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82777: Contec CONPROSYS PAC OS command injection](https://junglewise.ai/threats/cve-2026-82777-contec-conprosys-pac-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82774: Contec CONPROSYS M2M Gateway OS command injection](https://junglewise.ai/threats/cve-2026-82774-contec-conprosys-m2m-gateway-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82766: Contec SGA1000 OS command injection](https://junglewise.ai/threats/cve-2026-82766-contec-sga1000-os-command-injection) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82762: Contec FLEXLAN FX5000/FX4000/FX3000 OS command injection via login](https://junglewise.ai/threats/cve-2026-82762-contec-flexlan-fx5000-fx4000-fx3000-os-command-injection-via) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82772: Contec EC1000 buffer overflow in web service](https://junglewise.ai/threats/cve-2026-82772-contec-ec1000-buffer-overflow-in-web-service) (high, CVSS 8.8, published 14 Sep 2026) - [CVE-2026-82770: Contec RP-WAH-SR Series buffer overflow in web service](https://junglewise.ai/threats/cve-2026-82770-contec-rp-wah-sr-series-buffer-overflow-in-web-service) (high, CVSS 8.8, published 14 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 35 vulnerabilities in the four before. 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 35 | 1 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Contec technologies - [Contec CONPROSYS nano Remote I/O Coupler Unit (Server Type) CPSN-MCB271](https://junglewise.ai/threats/technologies/conprosys-nano-remote-i-o-coupler-unit-server-type-cpsn-mcb271): 3 vulnerabilities - [Contec SGA1000](https://junglewise.ai/threats/technologies/sga1000): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Contec vulnerabilities", https://junglewise.ai/threats/vendors/contec, 9 November 2026.