CVE-2026-82769: Medium severity Contec RP-WAH-SR Series vulnerability
Published Sep 14, 2026
·Updated
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.
Affected Software
1 affected component
Contec RP-WAH-SR Series
Event History
Sep 14, 2026
CVE Published
via MITRE·06:38 AM
Data Sourced
via MITRE·06:38 AM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require authentication?
Yes. The CVSS vector indicates that an attacker needs low-level privileges (PR:L); unauthenticated exploitation is not indicated.
2
Does a victim need to take an action for exploitation to succeed?
Yes. The CVSS vector specifies required user interaction (UI:R), so exploitation depends on a logged-in user interacting with attacker-controlled content or a request.
3
What is the likely impact if exploitation succeeds?
An attacker may execute arbitrary script in the logged-in user's browser. The CVSS vector indicates low confidentiality and integrity impact, with no availability impact.