8 matches found
CVE-2026-82779
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82780
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
CVE-2026-82780
An unrestricted file upload vulnerability (dangerous file type) affects the CONPROSYS TM Series by Consec . A remote authenticated attacker can upload a specially crafted file to achieve arbitrary command execution on the product. The flaw is scored CVSS 3.1: 8.8 (HIGH) — network vector, low comp...
CVE-2026-82780
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
EUVD-2026-77233
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...
EUVD-2026-77232
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82779
CONPROSYS TM Series (CONTEC) is affected by an OS Command Injection vulnerability caused by improper neutralization of special elements used in an OS command. An authenticated attacker with low privileges (able to log in to the product) can execute arbitrary OS commands , leading to high impact o...
CVE-2026-82779
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS TM Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...