Cross-Site Request Forgery in Contec Products
CVE-2026-82764
5.1MEDIUM
What is CVE-2026-82764?
A cross-site request forgery vulnerability exists in multiple Contec products, which could allow an attacker to perform unwanted operations if a user views a specially crafted webpage while logged into the affected product. This could lead to unauthorized data access or manipulation, posing a risk to the security integrity of user accounts.
Affected Version(s)
ECE1000 0 < 1.02
ECE1020 0 < 1.02
ECS1020 0 < 1.02
References
CVSS V4
Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
CVSS V3.0
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved