CVE-2026-82780
Received Received - Intake

Unrestricted File Upload RCE in CONPROSYS TM Series

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: JPCERT/CC

Description
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-82780
EUVD
EUVD-2026-77233

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
conprosys tm_series *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unrestricted upload of a dangerous file type in CONPROSYS TM Series. A remote authenticated attacker can upload a specially crafted file, which may allow arbitrary command execution on the product.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual file uploads or command execution attempts. Check server logs for unexpected file types or large uploads. Inspect network traffic for POST requests to file upload endpoints. Use intrusion detection systems to flag suspicious activity.

Impact Analysis

An attacker could execute arbitrary commands on the affected system, potentially leading to unauthorized access, data theft, or system compromise. This requires the attacker to be authenticated remotely.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality requirements in GDPR and HIPAA. Organizations may face legal penalties or compliance violations if exploited.

Mitigation Strategies

Immediately restrict file upload permissions to authorized users only. Implement strict file type validation and size limits. Disable execution permissions for uploaded files. Apply patches or updates from the vendor if available. Monitor for any signs of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82780. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart