Contec CAN-2-WF vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Contec CAN-2-WF: 3 record(s), with affected versions and fixes.

CVE-2026-82793 High · 7.2 CWE-434 Sep 14, 2026

Unrestricted Upload of File with Dangerous Type in Contec CAN-2-WF

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product.

CVE-2026-82792 Medium · 5.2 CWE-79 Sep 14, 2026

Cross-site Scripting (XSS) in Contec CAN-2-WF

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

CVE-2026-82791 High · 8.8 CWE-78 Sep 14, 2026

OS Command Injection in Contec CAN-2-WF

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.