CVE-2026-82771: Contec Co., Ltd ECE1000

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

Affected products

• Contec Co., Ltd ECE1000: before 1.02 (fixed in 1.02)
• Contec Co., Ltd ECE1020: before 1.02 (fixed in 1.02)
• Contec Co., Ltd ECS1020: before 1.02 (fixed in 1.02)

Published 2026-09-14. Last modified 2026-09-16.