Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-82781 EUVD-2026-77234GHSA-jww6-h856-xhj9

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed…

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by jpcert

Vendor: Contec Product: Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 Product: Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 Product: Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*

Description

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

VendorProductAffectedFixed
Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* < 1.82 1.82
Contec Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 < 1.02 1.02
Contec Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 < 1.61 1.61

References