CVE-2026-82764
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a...
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Active
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
- Record
CVE-2026-82764- CVSS 4.0
- 5.1 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
EUVDEUVD-2026-77218
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
- Record
EUVD-2026-77218- CVSS 4.0
- 5.1 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f9x8-prqh-c2m2
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a...
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
- Record
GHSA-f9x8-prqh-c2m2- CVSS 4.0
- 5.1 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
NVD
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
- Record
CVE-2026-82764- CVSS 4.0
- 5.1 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
- contec co., ltd. ece1000
- contec co., ltd. ece1020
- contec co., ltd. ecs1020
- contec co., ltd. fxa3000
- contec co., ltd. fxa3000-[][]
- contec co., ltd. fxa3020
- contec co., ltd. fxa3020-[][]
- contec co., ltd. fxa3200
- contec co., ltd. fxa5000
- contec co., ltd. fxa5020
- contec co., ltd. fxa5020-[][]
- contec co., ltd. fxe3000
Show 21 moreShow less
- contec co., ltd. fxe3000-[][]
- contec co., ltd. fxe3000-wp
- contec co., ltd. fxe4000
- contec co., ltd. fxe4000-wp
- contec co., ltd. fxe5000
- contec co., ltd. fxe5000-[][]
- contec co., ltd. fxs300[]-cn
- contec co., ltd. fxs4000
- contec co., ltd. fxs4020
- contec co., ltd. fxs5000-[][]
- contec co., ltd. fxs5021
- contec co., ltd. pc-helper wireless i/o dio-0404ry-lwf
- contec co., ltd. pc-helper wireless i/o dio-0404ry-lwf-us
- contec co., ltd. programmable remote i/o coupler unit (software plc type) cpsn-pcb271-s1-041
- contec co., ltd. remote i/o coupler unit (ethernet/ip adapter) cpsn-eob471ei-[]1
- contec co., ltd. remote i/o coupler unit (server type) cpsn-mcb271-*
- contec co., ltd. rp-wah-sr1
- contec co., ltd. rp-wah-sr12
- contec co., ltd. rp-wah-sr2
- contec co., ltd. rp-wah-sr22
- contec co., ltd. sga1000
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-82764 is a medium vulnerability (CVSS 5.1) in Contec Co., Ltd. Ece1000, published September 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. No source names a fixed version.
References
contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf
jvn.jp/en/vu/JVNVU99009004
nvd.nist.gov/vuln/detail/CVE-2026-82764
github.com/advisories/GHSA-f9x8-prqh-c2m2