OS Command Injection Vulnerability in Contec FX5000, FX4000, and FX3000 Series
CVE-2026-82762

8.7HIGH

Key Information:

Vendor

Contec Co., Ltd.

Status
Fxa5000
Fxa5020
Fxa5020-[][]
Fxe5000
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82762?

An OS Command Injection vulnerability exists in the Contec FX5000, FX4000, and FX3000 series products. This flaw permits an attacker who gains login access to execute arbitrary OS commands on the affected devices, potentially undermining the integrity and security of the system.

Affected Version(s)

FXA3000 0 < 1.20.00

FXA3000-[][] 0 < 1.20.00

FXA3020 0 < 1.20.00

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU99009004/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.