---
id: CVE-2026-82794
title: >-
  SolarView Compact contains an OS command Injection vulnerability in in
  Schedule Settings
summary: >-
  SolarView Compact contains an OS command Injection vulnerability in in
  Schedule Settings. If this vulnerability is exploited, an arbitrary OS command
  may be executed by an attacker who can log in to the product.
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-78
vendor: 'Contec Co., Ltd.'
product: SV-CPT-MC310
affected:
  - SV-CPT-MC310 < 9.00
  - SV-CPT-MC310F < 9.00
published: '2026-09-14'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T19:27:25.623'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82794'
references:
  - url: 'https://jvn.jp/en/vu/JVNVU97753461/'
    label: vultures@jpcert.or.jp
  - url: >-
      https://www.contec.com/api/downloadlogger?download=/-/media/Contec/support/security-info/2026/contec_security_sv_26091000_en.pdf
    label: vultures@jpcert.or.jp
tags:
  - nvd
  - cve.org
epss: 0.01868
epssPercentile: 0.78429
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-14T11:36:31.465018Z'
ingestedAt: '2026-09-14T15:23:07.460Z'
---

## Overview

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.