CVE-2026-82787

Name of the Vulnerable Software and Affected Versions Contec CPSL-08P1EN versions prior to 2.3.1.0

Description A missing authentication for critical function issue exists in the web settings function of the device. A remote attacker with network access to the management service can operate the affected product without authentication. Successful exploitation may lead to data theft, tampering, and the execution of malicious programs. This occurs because the server-side identity enforcement fails to properly validate authentication before allowing sensitive operations on the settings screen.

Recommendations Update CPSL-08P1EN to firmware 2.3.1.0 or later. Disconnect the product from network lines, place a firewall upstream to allow only trusted communications, and restrict access to a trusted closed network.