Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-82785 | medium | 4.3 | No | Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Receiving a specially crafted reque... | 2026-09-16 |
| CVE-2026-82784 | medium | 6.5 | No | Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. An attacker may ex... | 2026-09-16 |
| CVE-2026-82783 | medium | 4.2 | No | Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access... | 2026-09-16 |
| CVE-2026-82782 | medium | 4.3 | No | Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attack... | 2026-09-16 |
| CVE-2026-82781 | medium | 5.4 | No | Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed... | 2026-09-16 |
| CVE-2026-82780 | high | 8.8 | No | Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote aut... | 2026-09-16 |
| CVE-2026-82779 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. If this vuln... | 2026-09-16 |
| CVE-2026-82778 | medium | 4.3 | No | An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allo... | 2026-09-16 |
| CVE-2026-82777 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. If this vul... | 2026-09-16 |
| CVE-2026-82776 | medium | 6.1 | No | Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed o... | 2026-09-16 |
| CVE-2026-82775 | medium | 4.3 | No | An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Acces... | 2026-09-16 |
| CVE-2026-82774 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and... | 2026-09-16 |
| CVE-2026-82773 | medium | 6.1 | No | Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is expl... | 2026-09-16 |
| CVE-2026-82772 | high | 8.8 | No | Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web se... | 2026-09-16 |
| CVE-2026-82771 | medium | 5.4 | No | Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed o... | 2026-09-16 |
| CVE-2026-82770 | high | 8.8 | No | Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web... | 2026-09-16 |
| CVE-2026-82769 | medium | 5.4 | No | Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be execute... | 2026-09-16 |
| CVE-2026-82768 | high | 8.1 | No | Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or alter... | 2026-09-16 |
| CVE-2026-82767 | medium | 5.2 | No | Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in... | 2026-09-16 |
| CVE-2026-82766 | high | 8.8 | No | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is... | 2026-09-16 |