CVE-2026-82775: Medium severity CONPROSYS M2M Gateway Series vulnerability
Published Sep 14, 2026
·Updated
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication.
Affected Software
2 affected components
CONPROSYS M2M Gateway Series
CONPROSYS M2M Controller Series
Event History
Sep 14, 2026
CVE Published
via MITRE·06:39 AM
Data Sourced
via MITRE·06:39 AM
DescriptionSeverity
Frequently Asked Questions
1
Which systems are exposed to this issue?
CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series products are affected. The issue is reachable remotely through a specific URL.
2
Does an attacker need credentials or user interaction?
No. A remote unauthenticated attacker may obtain a directory listing without authentication, and no user interaction is required.
3
What information can be exposed?
The reported impact is disclosure of a directory list. The available information does not specify which directories or files may be listed.