Skip to main content
← All vulnerabilities
CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.12.00, 1.14.00, 1.20.00
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Contec Co., Ltd. FXA5000

    fixed in 1.12.00

  • Contec Co., Ltd. FXA5020

    fixed in 1.12.00

  • Contec Co., Ltd. FXA5020-[][]

    fixed in 1.12.00

  • Contec Co., Ltd. FXE5000

    fixed in 1.12.00

  • Contec Co., Ltd. FXE5000-[][]

    fixed in 1.12.00

  • Contec Co., Ltd. FXS5000-[][]

    fixed in 1.12.00

  • Contec Co., Ltd. FXS5021

    fixed in 1.12.00

  • Contec Co., Ltd. FXE4000

    fixed in 1.14.00

  • Contec Co., Ltd. FXE4000-WP

    fixed in 1.14.00

  • Contec Co., Ltd. FXS4000

    fixed in 1.14.00

  • Contec Co., Ltd. FXS4020

    fixed in 1.14.00

  • Contec Co., Ltd. FXA3000

    fixed in 1.20.00

  • Contec Co., Ltd. FXA3000-[][]

    fixed in 1.20.00

  • Contec Co., Ltd. FXA3020

    fixed in 1.20.00

  • Contec Co., Ltd. FXA3020-[][]

    fixed in 1.20.00

  • Contec Co., Ltd. FXA3200

    fixed in 1.20.00

  • Contec Co., Ltd. FXE3000

    fixed in 1.20.00

  • Contec Co., Ltd. FXE3000-[][]

    fixed in 1.20.00

  • Contec Co., Ltd. FXE3000-WP

    fixed in 1.20.00

  • Contec Co., Ltd. FXS300[]-CN

    fixed in 1.20.00

References 2

contec.com

jvn.jp