CVE-2026-82786

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-09-14

Last updated on: 2026-09-16

Assigner: JPCERT/CC

Description

Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. If this vulnerability is exploited, sensitive information may be restored from a backup file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-16

Generated

2026-10-19

AI Q&A

2026-09-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-82786

EUVD

EUVD-2026-77239

Affected Vendors & Products

Vendor	Product	Version / Range
Contec	Co.,	Ltd. Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability involves insufficiently protected credentials in the Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. Exploitation could allow sensitive information to be restored from a backup file.

Detection Guidance

This vulnerability involves insufficiently protected credentials in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*. To detect it, inspect backup files for sensitive information like credentials. Check if backup files contain plaintext or weakly encrypted credentials. Review system logs for unauthorized access attempts or unusual backup restoration activities.

Impact Analysis

If exploited, attackers could access sensitive information stored in backup files, potentially leading to data breaches or unauthorized access to system credentials.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA due to unauthorized access to sensitive data, potentially resulting in legal penalties or data protection violations.

Mitigation Strategies

Immediately restrict access to backup files containing sensitive information and ensure they are encrypted. Review and update authentication mechanisms for the Remote I/O Coupler Unit to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-82786. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70