https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:10:18 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-82791 <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-82791 https://vulnerability.circl.lu/vuln/ghsa-vxg5-xqxv-m956 <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.</p> https://vulnerability.circl.lu/vuln/ghsa-vxg5-xqxv-m956 https://vulnerability.circl.lu/vuln/jvndb-2026-032931 <p>PC-HELPER series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/352.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82790&lt;/li&gt;&lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2026-82764&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-82791&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82792&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-82793&lt;/li&gt;&lt;/ul&gt;Contec Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> <p>PC-HELPER series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/352.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/78.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82790&lt;/li&gt;&lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2026-82764&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2026-82791&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-82792&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2026-82793&lt;/li&gt;&lt;/ul&gt;Contec Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-032931