OS Command Injection Vulnerability in CONPROSYS TM Series by Contec
CVE-2026-82779

8.7HIGH

Key Information:

Vendor

Contec Co., Ltd

Status
Cps-tm341g5mb-adsc1-931
Cps-tm341mb-adsc1-931
Cps-tm341gmb-adsc1-931
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82779?

A vulnerability exists in the CONPROSYS TM Series by Contec, where improper neutralization of special elements used in OS commands could allow an authenticated attacker to execute arbitrary OS commands. This poses significant security risks as it enables unauthorized access and manipulation of system operations, thereby compromising the integrity of the affected systems.

Affected Version(s)

CPS-TM341G5MB-ADSC1-931 0 < 2.19

CPS-TM341GMB-ADSC1-931 0 < 2.19

CPS-TM341MB-ADSC1-931 0 < 2.19

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU96551518/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.