CVE-2026-82781 — Contec Co., Ltd. / Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*

CVE-2026-82781

Contec Co., Ltd. / Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* PUBLISHED

Description (CNA)

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected (CNA)

Vendor / product	Versions
Contec Co., Ltd. / Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*	affected 0 before 1.82
Contec Co., Ltd. / Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1	affected 0 before 1.02
Contec Co., Ltd. / Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041	affected 0 before 1.61

CWE

CWE-79

References

https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_cps_26091000_en.pdf
https://jvn.jp/en/vu/JVNVU96551518/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.