Authentication Bypass Vulnerability in Contec Remote I/O Coupler Unit
CVE-2026-82784

6.9MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Remote I/o Coupler Unit (server Type) Cpsn-mcb271-*
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82784?

A security issue exists in the Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. This vulnerability allows an attacker to bypass authentication for critical functions, enabling unauthorized execution of REST API commands. Consequently, the attacker could potentially access I/O values or manipulate output, posing a significant risk to the integrity of the system.

Affected Version(s)

Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* 0 < 1.82

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU96551518/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.