Contec Co., Ltd ECS1020 vulnerabilities

3 CVEs affecting Contec Co., Ltd ECS1020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82772, published 2026-09-14.

More from Contec Co., Ltd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-82772, published 2026-09-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary program may be executed.
• CVE-2026-82771, published 2026-09-14. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
• CVE-2026-82764, published 2026-09-14. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.