What is CVE-2026-82789?

CVE-2026-82789 is a high-severity vulnerability in Contec Conprosys Hmi System(chs), classified under Eval Injection. CVSS score: 8.8/10. Published 2026-09-14.

How severe is CVE-2026-82789?

High severity. CVSS v3 base score is 8.8 out of 10.

RCE in Contec Conprosys Hmi System(chs)

CVE-2026-82789

An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary code may be executed by an attacker who can log in to the product.

EPSS: 0.003 (23.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Contec Conprosys Hmi System(chs)

Weakness classification (CWE)

CWE-95 — Eval Injection

References

vultures@jpcert.or.jp
vultures@jpcert.or.jp

Frequently asked questions

What is CVE-2026-82789?: CVE-2026-82789 is a high-severity vulnerability in Contec Conprosys Hmi System(chs), classified under Eval Injection. CVSS score: 8.8/10. Published 2026-09-14.
How severe is CVE-2026-82789?: High severity. CVSS v3 base score is 8.8 out of 10.