CVE-2026-82764
Received Received - Intake

Cross-Site Request Forgery in Contec Products

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: JPCERT/CC

Description
Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-82764
EUVD
EUVD-2026-77218

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82764 is a cross-site request forgery (CSRF) vulnerability affecting multiple CONTEC CONPROSYS Series products. It allows attackers to trick users into executing unauthorized actions through crafted web requests while logged in to the affected product.

Impact Analysis

If exploited, this vulnerability could lead to unintended operations being performed on the affected device, such as unauthorized redirections to malicious sites or execution of unwanted actions without the user's knowledge.

Mitigation Strategies

Update the firmware to the latest version provided by Contec for the affected CONPROSYS Series or PC-HELPER Series products. If updating is not possible, disconnect the product from network lines, install a firewall to allow only trusted communications, and restrict network access to a trusted closed network.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82764. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart