Cross-Site Scripting Vulnerability in CONPROSYS PAC Series by Contec
CVE-2026-82776

5.1MEDIUM

Key Information:

Vendor: Contec Co., Ltd.
Status: Integrated Type Cps-pc341[][]-*-9201; Configurable Type Cps-pcs341[][]-ds1-1201
Vendor: CVE Published:; 14 September 2026

🔔 Create Contec Co., Ltd. Vulnerability Alert

What is CVE-2026-82776?

A cross-site scripting vulnerability has been identified in the CONPROSYS PAC Series by Contec. When exploited, this vulnerability allows attackers to execute arbitrary scripts on the web browsers of logged-in users, compromising their session and potentially leading to unauthorized access or data leakage. It is critical for users of the affected series to apply the necessary updates and patches as soon as they are available to mitigate associated risks.

Affected Version(s)

Configurable type CPS-PCS341[][]-DS1-1201 0 < 3.0.0

Integrated Type CPS-PC341[][]-*-9201 0 < 3.0.0

References

https://www.contec.com/api/downloadlogger?download=/-/med...

https://jvn.jp/en/vu/JVNVU96551518/

CVSS V4

Score:

5.1

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
Aug 31, 2026

CVE-2026-82776 Data

JSON