# cve.now: Contec Co., Ltd.

The newest entries naming Contec Co., Ltd. as an affected vendor (up to 200), of 66 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-82796](https://cve.now/CVE-2026-82796.md): SolarView Compact contains a cross-site scripting vulnerability in Image Management. (CVSS 5.4)
- [CVE-2026-82795](https://cve.now/CVE-2026-82795.md): SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. (CVSS 5.4)
- [CVE-2026-82794](https://cve.now/CVE-2026-82794.md): SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. (CVSS 8.8)
- [CVE-2026-82793](https://cve.now/CVE-2026-82793.md): Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. (CVSS 7.2)
- [CVE-2026-82765](https://cve.now/CVE-2026-82765.md): Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. (CVSS 8.1)
- [CVE-2026-82792](https://cve.now/CVE-2026-82792.md): Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. (CVSS 5.2)
- [CVE-2026-82791](https://cve.now/CVE-2026-82791.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wir (CVSS 8.8)
- [CVE-2026-82790](https://cve.now/CVE-2026-82790.md): Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. (CVSS 5.4)
- [CVE-2026-82789](https://cve.now/CVE-2026-82789.md): An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). (CVSS 8.8)
- [CVE-2026-82763](https://cve.now/CVE-2026-82763.md): Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. (CVSS 5.4)
- [CVE-2026-82787](https://cve.now/CVE-2026-82787.md): Missing authentication for critical function vulnerability exists in CPSL-08P1EN. (CVSS 9.8)
- [CVE-2026-82788](https://cve.now/CVE-2026-82788.md): Cross-site scripting vulnerability exists in CPSL-08P1EN. (CVSS 6.1)
- [CVE-2026-82786](https://cve.now/CVE-2026-82786.md): Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-\*. (CVSS 6.3)
- [CVE-2026-82785](https://cve.now/CVE-2026-82785.md): Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-\*. (CVSS 4.3)
- [CVE-2026-82784](https://cve.now/CVE-2026-82784.md): Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-\*. (CVSS 6.5)
- [CVE-2026-82783](https://cve.now/CVE-2026-82783.md): Plaintext storage of a password issue exists in CONPROSYS nano Series . (CVSS 4.2)
- [CVE-2026-82782](https://cve.now/CVE-2026-82782.md): Out-of-bounds write vulnerability exists in CONPROSYS nano Series. (CVSS 4.3)
- [CVE-2026-82781](https://cve.now/CVE-2026-82781.md): Cross-site scripting vulnerability exists in CONPROSYS nano Series. (CVSS 5.4)
- [CVE-2026-82780](https://cve.now/CVE-2026-82780.md): Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. (CVSS 8.8)
- [CVE-2026-82779](https://cve.now/CVE-2026-82779.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series. (CVSS 8.8)
- [CVE-2026-82778](https://cve.now/CVE-2026-82778.md): An exposure of information through directory listing issue exists in CONPROSYS PAC Series. (CVSS 4.3)
- [CVE-2026-82777](https://cve.now/CVE-2026-82777.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series. (CVSS 8.8)
- [CVE-2026-82776](https://cve.now/CVE-2026-82776.md): Cross-site scripting vulnerability exists in CONPROSYS PAC Series. (CVSS 6.1)
- [CVE-2026-82775](https://cve.now/CVE-2026-82775.md): An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. (CVSS 4.3)
- [CVE-2026-82774](https://cve.now/CVE-2026-82774.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and (CVSS 8.8)
- [CVE-2026-82773](https://cve.now/CVE-2026-82773.md): Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. (CVSS 6.1)
- [CVE-2026-82772](https://cve.now/CVE-2026-82772.md): Buffer overflow vulnerability exists in Contec EC1000 series. (CVSS 8.8)
- [CVE-2026-82771](https://cve.now/CVE-2026-82771.md): Cross-site scripting vulnerability exists in Contec EC1000 series. (CVSS 5.4)
- [CVE-2026-82770](https://cve.now/CVE-2026-82770.md): Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. (CVSS 8.8)
- [CVE-2026-82768](https://cve.now/CVE-2026-82768.md): Path traversal vulnerability exists in SGA1000. (CVSS 8.1)
- [CVE-2026-82769](https://cve.now/CVE-2026-82769.md): Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. (CVSS 5.4)
- [CVE-2026-82767](https://cve.now/CVE-2026-82767.md): Cross-site scripting vulnerability exists in SGA1000. (CVSS 5.2)
- [CVE-2026-82766](https://cve.now/CVE-2026-82766.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. (CVSS 8.8)
- [CVE-2026-82764](https://cve.now/CVE-2026-82764.md): Cross-site request forgery vulnerability exists in multiple Contec products. (CVSS 4.3)
- [CVE-2026-82762](https://cve.now/CVE-2026-82762.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 seri (CVSS 8.8)
- [CVE-2025-34081](https://cve.now/CVE-2025-34081.md): CONPROSYS HMI System (CHS) \< 3.7.7 Exposed PHP Debug Info (CVSS 6.9)
- [CVE-2025-34080](https://cve.now/CVE-2025-34080.md): CONPROSYS HMI System (CHS) \< 3.7.7 Reflected Cross-Site Scripting (CVSS 5.1)
- [CVE-2023-29154](https://cve.now/CVE-2023-29154.md): SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 7.2)
- [CVE-2023-28824](https://cve.now/CVE-2023-28824.md): Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 4.9)
- [CVE-2023-28713](https://cve.now/CVE-2023-28713.md): Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 8.1)
- [CVE-2023-28657](https://cve.now/CVE-2023-28657.md): Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 8.8)
- [CVE-2023-28651](https://cve.now/CVE-2023-28651.md): Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 4.8)
- [CVE-2023-28399](https://cve.now/CVE-2023-28399.md): Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. (CVSS 7.8)
- [CVE-2023-2758](https://cve.now/CVE-2023-2758.md): Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service (CVSS 3.7)
- [CVE-2023-27920](https://cve.now/CVE-2023-27920.md): Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and (CVSS 4.3)
- [CVE-2023-27521](https://cve.now/CVE-2023-27521.md): OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v (CVSS 8.8)
- [CVE-2023-27518](https://cve.now/CVE-2023-27518.md): Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F v (CVSS 8.8)
- [CVE-2023-27514](https://cve.now/CVE-2023-27514.md): OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versi (CVSS 8.8)
- [CVE-2023-27512](https://cve.now/CVE-2023-27512.md): Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8 (no CVSS)
- [CVE-2023-27917](https://cve.now/CVE-2023-27917.md): OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenan (CVSS 8.8)
- [CVE-2023-27389](https://cve.now/CVE-2023-27389.md): Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative (CVSS 7.2)
- [CVE-2023-23575](https://cve.now/CVE-2023-23575.md): Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction (CVSS 4.3)
- [CVE-2023-22324](https://cve.now/CVE-2023-22324.md): SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arb (CVSS 6.5)
- [CVE-2023-22373](https://cve.now/CVE-2023-22373.md): Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an a (CVSS 5.4)
- [CVE-2023-22339](https://cve.now/CVE-2023-22339.md): Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass (CVSS 7.5)
- [CVE-2023-22334](https://cve.now/CVE-2023-22334.md): Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remot (CVSS 5.3)
- [CVE-2023-22331](https://cve.now/CVE-2023-22331.md): Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alt (CVSS 7.5)
- [CVE-2022-44456](https://cve.now/CVE-2022-44456.md): CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server w (CVSS 9.8)
- [CVE-2022-35239](https://cve.now/CVE-2022-35239.md): The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an in (no CVSS)
- [CVE-2021-20662](https://cve.now/CVE-2021-20662.md): Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting info (no CVSS)
- [CVE-2021-20661](https://cve.now/CVE-2021-20661.md): Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary file (no CVSS)
- [CVE-2021-20660](https://cve.now/CVE-2021-20660.md): Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via u (no CVSS)
- [CVE-2021-20659](https://cve.now/CVE-2021-20659.md): SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2021-20658](https://cve.now/CVE-2021-20658.md): SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspec (no CVSS)
- [CVE-2021-20657](https://cve.now/CVE-2021-20657.md): Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or a (no CVSS)
- [CVE-2021-20656](https://cve.now/CVE-2021-20656.md): Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obt (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/contec
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.