CVE-2026-82793
Received Received - Intake

Unrestricted File Upload in Contec CAN 2.0B Communication Wireless LAN/USB Converter

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: JPCERT/CC

Description
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-82793
EUVD
EUVD-2026-77249

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
contec can 2.0b

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unrestricted upload of a dangerous file type in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. A remote authenticated attacker could upload a specially crafted file, leading to arbitrary code execution on the device.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected device, potentially leading to unauthorized access, data theft, or disruption of device functionality.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must address it to maintain data protection and security standards.

Mitigation Strategies

Restrict file uploads to only trusted sources and validate file types. Ensure authentication is enforced for all upload operations. Monitor network traffic for suspicious file uploads or unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82793. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart