CVE-2026-82762 PUBLISHED

Assigner: jpcert
Reserved: 31.08.2026 Published: 14.09.2026 Updated: 14.09.2026

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.7

Product Status

Vendor Contec Co., Ltd.
Product FXA5000
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA5020
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA5020-[][]
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE5000
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE5000-[][]
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXS5000-[][]
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXS5021
Versions Default: unaffected
  • affected from 0 to 1.12.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE4000
Versions Default: unaffected
  • affected from 0 to 1.14.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE4000-WP
Versions Default: unaffected
  • affected from 0 to 1.14.00 (excl.)
Vendor Contec Co., Ltd.
Product FXS4000
Versions Default: unaffected
  • affected from 0 to 1.14.00 (excl.)
Vendor Contec Co., Ltd.
Product FXS4020
Versions Default: unaffected
  • affected from 0 to 1.14.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA3000
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA3000-[][]
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA3020
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA3020-[][]
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXA3200
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE3000
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE3000-[][]
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXE3000-WP
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)
Vendor Contec Co., Ltd.
Product FXS300[]-CN
Versions Default: unaffected
  • affected from 0 to 1.20.00 (excl.)

References

Problem Types