https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:29:40.666703+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367431 EUVD-2026-367431 2026-10-07T10:29:40.728615+00:00 EUVD-2026-367431 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82762 fkie_cve-2026-82762 2026-10-07T10:29:40.728655+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

 https://cve.radiocsirt.org/vuln/ghsa-v74j-9rmc-ppr5 GHSA-v74j-9rmc-ppr5 2026-10-07T10:29:40.728690+00:00

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

 https://cve.radiocsirt.org/vuln/jvndb-2026-033234 jvndb-2026-033234 2026-10-07T10:29:40.728708+00:00

FLEXLAN series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/352.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/23.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/120.html' target='_blank'></a><ul><li>OS command injection (CWE-78) - CVE-2026-82762, CVE-2026-82766</li><li>Cross-site scripting (CWE-79) - CVE-2026-82763, CVE-2026-82769, CVE-2026-82771</li><li>Cross-site request forgery (CWE-352) - CVE-2026-82764</li><li>Path traversal (CWE-23) - CVE-2026-82765, CVE-2026-82768</li><li>Cross-site scripting (CWE-79) - CVE-2026-82767</li><li>Buffer overflow (CWE-120) - CVE-2026-82770, CVE-2026-82772</li></ul>Contec Co., Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.