Contec Co., Ltd SGA1000 vulnerabilities

4 CVEs affecting Contec Co., Ltd SGA1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-82768, published 2026-09-14.

More from Contec Co., Ltd.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-82766, published 2026-09-14. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an…
• CVE-2026-82768, published 2026-09-14. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.
• CVE-2026-82767, published 2026-09-14. Medium severity, CVSS 5.2. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
• CVE-2026-82764, published 2026-09-14. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.