High severity · published Sep 14, 2026
CVE-2026-82765
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series
8.1
CVSS
0.5%
EPSS
No
On KEV
Description
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FX
FXA3000 · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXA3000-[][] · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXA3020 · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXA3020-[][] · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXA3200 · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXA5000 · Contec Co., Ltd.
before 1.12.00 · source: vendor
FX
FXA5020 · Contec Co., Ltd.
before 1.12.00 · source: vendor
FX
FXA5020-[][] · Contec Co., Ltd.
before 1.12.00 · source: vendor
FX
FXE3000 · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXE3000-WP · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXE3000-[][] · Contec Co., Ltd.
before 1.20.00 · source: vendor
FX
FXE4000 · Contec Co., Ltd.
before 1.14.00 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-82765
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-82765
jvn.jp
https://jvn.jp/en/vu/JVNVU99009004/
www.contec.com
https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_fl_26091000_en.pdf
More from FXA3000
8.8
CVE-2026-82762
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series
5.4
CVE-2026-82763
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series
4.3
CVE-2026-82764
Cross-site request forgery vulnerability exists in multiple Contec products