Directory Listing Vulnerability in CONPROSYS PAC Series by Contec
CVE-2026-82778

5.3MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Integrated Type Cps-pc341[][]-*-9201
Configurable Type Cps-pcs341[][]-ds1-1201
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82778?

A directory listing vulnerability in the CONPROSYS PAC Series allows remote unauthenticated attackers to access sensitive directory information. By navigating to a specific URL, attackers can retrieve a list of files and directories without requiring authentication, potentially exposing confidential data and system configurations. It is crucial for users to apply security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Configurable type CPS-PCS341[][]-DS1-1201 0 < 3.0.0

Integrated Type CPS-PC341[][]-*-9201 0 < 3.0.0

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU96551518/

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.