Cross-Site Scripting Vulnerability in SGA1000 by Contec
CVE-2026-82767

4.8MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Sga1000
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82767?

A cross-site scripting vulnerability exists in the SGA1000 product by Contec. When exploited, it allows an attacker to execute arbitrary scripts in the web browsers of logged-in users, potentially compromising user data and functionality. It's essential for users of affected versions to take immediate action to mitigate risks associated with this vulnerability.

Affected Version(s)

SGA1000 0 < 1.02

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU99009004/

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.