Cross-Site Scripting Vulnerability in Contec RP-WAH-SR Series
CVE-2026-82769

4.8MEDIUM

Key Information:

Vendor: Contec Co., Ltd.
Status: Rp-wah-sr1; Rp-wah-sr2; Rp-wah-sr12; Rp-wah-sr22
Vendor: CVE Published:; 14 September 2026

🔔 Create Contec Co., Ltd. Vulnerability Alert

What is CVE-2026-82769?

A cross-site scripting vulnerability has been identified in the Contec RP-WAH-SR Series. This issue allows an attacker to execute arbitrary scripts within the context of a logged-in user's web browser. Exploiting this vulnerability can lead to unauthorized actions and data being exposed, potentially compromising user accounts and sensitive information.

Affected Version(s)

RP-WAH-SR1 0 < 1.03

RP-WAH-SR12 0 < 1.02

RP-WAH-SR2 0 < 1.03

References

https://www.contec.com/api/downloadlogger?download=/-/med...

https://jvn.jp/en/vu/JVNVU99009004/

CVSS V4

Score:

4.8

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
Aug 31, 2026

CVE-2026-82769 Data

JSON