Cross-Site Scripting Vulnerability in SolarView Compact by Contec
CVE-2026-82795

5.1MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Sv-cpt-mc310
Sv-cpt-mc310f
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82795?

SolarView Compact by Contec is affected by a cross-site scripting vulnerability found in the Schedule Settings and Mail Send Setting modules. This flaw allows an attacker with valid login credentials to exploit the vulnerability and execute arbitrary operating system commands. If left unaddressed, the vulnerability could lead to unauthorized system access and potential data compromise. Users of this product should take immediate action to secure their systems and apply any available patches.

Affected Version(s)

SV-CPT-MC310 0 < 9.00

SV-CPT-MC310F 0 < 9.00

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU97753461/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.