Vulnerability Intelligence Report
CVE-2026-82795
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Cross-Site Scripting (XSS)
No Active Exploit Signals
CVSS Base Score
5.4
MEDIUM
Exploitability:2.3
Impact Score:2.8
EPSS Probability:0.14%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-79 ↗Cross-site scripting (XSS)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Contec Co., Ltd. | SV-CPT-MC310 | 0 < 9.00 (affected) |
| Contec Co., Ltd. | SV-CPT-MC310F | 0 < 9.00 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | JPCERT/CC · CERT · Japan |
| Reserved | 2026-08-31T02:30:58 |
| Published | 2026-09-14T06:46:12 |
| Last Updated | 2026-09-14T14:45:41 |
Community Chatter & Buzz