Cross-Site Scripting Vulnerability in SolarView Compact by Contec
CVE-2026-82796

5.1MEDIUM

Key Information:

Vendor

Contec Co., Ltd.

Status
Sv-cpt-mc310
Sv-cpt-mc310f
Vendor
CVE Published:
14 September 2026

What is CVE-2026-82796?

The SolarView Compact product by Contec has a cross-site scripting vulnerability within its Image Management feature. This security flaw allows an authenticated attacker to execute arbitrary OS commands, potentially compromising the system. Organizations using affected versions of this product should take immediate action to mitigate the risks associated with this vulnerability to safeguard their systems.

Affected Version(s)

SV-CPT-MC310 0 < 9.00

SV-CPT-MC310F 0 < 9.00

References

https://www.contec.com/api/downloadlogger?download=/-/med...
https://jvn.jp/en/vu/JVNVU97753461/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.