CVE-2026-82765CWE-23

CVE-2026-82765

High · published September 14, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
40.9
In the wild
Unconfirmed
What it is

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00486 · 40.9th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-09-14T11:17Z
References (2)
https://jvn.jp/en/vu/JVNVU99009004/ · [email protected]https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf · [email protected]
EPSS history
Timeline
  • 15 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 14 SEP 06:45Z
    Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series
    cvelistv5