OS Command Injection Vulnerability in SolarView Compact by Contec
CVE-2026-82794

8.7HIGH

Key Information:

Vendor

Contec Co., Ltd.

Status
Sv-cpt-mc310
Sv-cpt-mc310f
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82794?

The SolarView Compact by Contec includes a vulnerability that allows for OS command injection through its Schedule Settings. This flaw can be exploited by attackers who gain access to the system, enabling them to execute arbitrary operating system commands, which poses a significant risk to the integrity and security of the affected systems. Organizations using this product are advised to evaluate their exposure and apply mitigations promptly.

Affected Version(s)

SV-CPT-MC310 0 < 9.00

SV-CPT-MC310F 0 < 9.00

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU97753461/

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.