CVE-2026-82764

Cross‑Site Request Forgery in Contec Device Web Interfaces

Published Sep 14, 2026 CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Cross‑Site Request Forgery in Contec Device Web Interfaces
Type Values Removed Values Added
Title Cross‑Site Request Forgery in Contec Device Web Interfaces
Type Values Removed Values Added
Title Cross‑Site Request Forgery in Contec Device Web Interfaces
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.
Weaknesses CWE-352
References
Metrics cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Sep 14, 2026, 11:19 AM
Reserved
Aug 31, 2026, 2:30 AM
Status
Deferred
Published
Sep 14, 2026, 7:17 AM
Modified
Sep 16, 2026, 7:27 PM