CVE-2026-82765
- State
- Published
- Severity
- 8.6 High
- Published
- Sep 14, 2026
- Updated
- Sep 14, 2026
- Reserved
- Aug 31, 2026
Description
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N | jpcert |
Weaknesses
- CWE-23 Relative path traversal
Affected Products
| Product | Versions |
|---|---|
FXA5000Contec Co., Ltd. |
|
FXA5020Contec Co., Ltd. |
|
FXA5020-[][]Contec Co., Ltd. |
|
FXE5000Contec Co., Ltd. |
|
FXE5000-[][]Contec Co., Ltd. |
|
FXS5000-[][]Contec Co., Ltd. |
|
FXS5021Contec Co., Ltd. |
|
FXE4000Contec Co., Ltd. |
|
FXE4000-WPContec Co., Ltd. |
|
FXS4000Contec Co., Ltd. |
|
FXS4020Contec Co., Ltd. |
|
FXA3000Contec Co., Ltd. |
|
FXA3000-[][]Contec Co., Ltd. |
|
FXA3020Contec Co., Ltd. |
|
FXA3020-[][]Contec Co., Ltd. |
|
FXA3200Contec Co., Ltd. |
|
FXE3000Contec Co., Ltd. |
|
FXE3000-[][]Contec Co., Ltd. |
|
FXE3000-WPContec Co., Ltd. |
|
FXS300[]-CNContec Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.