CVE-2026-82796
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Risk Assessment
An attacker with valid credentials could execute arbitrary OS commands, potentially leading to full device compromise. This may result in loss of confidentiality, integrity, and availability.
Recommendation
Update SolarView Compact software to a version containing the XSS fix. Restrict access to the management interface and change default passwords.
Other vulnerabilities in SolarView Compact
See all- CVE-2022-29303CriticalActively exploited
SolarView Compact version 6.00 was found to contain a command injection vulnerability via conf_mail.php. An attacker can exploit this to execute arbitrary system commands on the device.
- CVE-2026-82795Medium
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82794High
SolarView Compact contains an OS command injection vulnerability in Schedule Settings. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS