Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-82791

OS Command Injection Vulnerability in Contec CAN 2.0B Converter Unit

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

CVSS 4.0 · 8.7 High EPSS 1.9% KEV · Not listed
Vendors
Contec
Products
Can-2-usb Can-2-wf
CVE-2026-82792

Arbitrary JavaScript Execution via XSS in Contec CAN‑2 Web Interface

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Contec
Products
Can-2-usb Can-2-wf
CVE-2026-82793

Unrestricted File Upload Causing Arbitrary Code Execution in Contec CAN 2.0B Converter Units

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Contec
Products
Can-2-usb Can-2-wf