Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2026-57083 CVE-2026-82765 · GHSA-3vqr-mgc9-pjp4

Path traversal in Contec Co., Ltd. FXA5000

Priority MEDIUM 40

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00486 Published 2026-09-14 Fixed in 1.12.00, 1.14.00 +1 CWE-23
Priority LOW 22

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00235 Published 2026-09-14 Fixed in 1.12.00, 1.14.00 +1 CWE-79
Priority LOW 23

Cross-site request forgery vulnerability exists in multiple Contec products.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00195 Published 2026-09-14 Fixed in 1.12.00, 1.14.00 +6 CWE-352
Priority MEDIUM 43

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01868 Published 2026-09-14 Fixed in 1.12.00, 1.14.00 +1 CWE-78