Cross-site Scripting Vulnerability in PC-HELPER Wireless I/O Products by Contec
CVE-2026-82790

4.8MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Pc-helper Wireless I/o Dio-0404ry-lwf
Pc-helper Wireless I/o Dio-0404ry-lwf-us
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82790?

A cross-site scripting vulnerability has been identified in the PC-HELPER Wireless I/O DIO-0404RY-LWF and its variant, DIO-0404RY-LWF-US. If exploited, this vulnerability allows attackers to execute arbitrary scripts on the web browser of a logged-in user, potentially leading to unauthorized actions and information leakage. Users of these products should implement immediate security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

PC-HELPER Wireless I/O DIO-0404RY-LWF 0 < 1.01.00

PC-HELPER Wireless I/O DIO-0404RY-LWF-US 0 < 1.01.00

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU90314828/

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.