Cross-Site Scripting Vulnerability in Contec EC1000 Series by Contec
CVE-2026-82771

4.8MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Ece1000
Ece1020
Ecs1020
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82771?

A Cross-Site Scripting (XSS) vulnerability has been identified in the Contec EC1000 series. This flaw allows an attacker to inject malicious scripts into the web application, which may be executed in the web browser of a logged-in user. Successful exploitation of this vulnerability can lead to unauthorized access to sensitive data or manipulation of user sessions, posing significant security risks.

Affected Version(s)

ECE1000 0 < 1.02

ECE1020 0 < 1.02

ECS1020 0 < 1.02

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU99009004/

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.