CVE-2026-82762: Contec Co., Ltd FXA3000

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

Affected products

• Contec Co., Ltd FXA3000: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXA3000-: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXA3020: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXA3020-: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXA3200: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXA5000: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXA5020: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXA5020-: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXE3000: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXE3000-: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXE3000-Wp: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXE4000: before 1.14.00 (fixed in 1.14.00)
• Contec Co., Ltd FXE4000-Wp: before 1.14.00 (fixed in 1.14.00)
• Contec Co., Ltd FXE5000: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXE5000-: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXS300-Cn: before 1.20.00 (fixed in 1.20.00)
• Contec Co., Ltd FXS4000: before 1.14.00 (fixed in 1.14.00)
• Contec Co., Ltd FXS4020: before 1.14.00 (fixed in 1.14.00)
• Contec Co., Ltd FXS5000-: before 1.12.00 (fixed in 1.12.00)
• Contec Co., Ltd FXS5021: before 1.12.00 (fixed in 1.12.00)

Published 2026-09-14. Last modified 2026-09-16.