CVE-2026-82787

CPSL-08P1EN is affected by a missing authentication for critical function vulnerability (CWE-306), rated high severity with a CVSS v4.0 base score of 8.7. A remote attacker who can reach the affected product over the network can invoke a critical function without supplying valid credentials and operate the device as if they were an authorized user. The CVSS vector indicates high impact on the device's confidentiality, integrity, and availability, meaning an attacker could potentially read, alter, or disrupt its operation. Organizations running CPSL-08P1EN units whose network management/control interface is reachable from untrusted networks or the internet are the most exposed. As of this writing, no public proof-of-concept is known, there are no confirmed reports of exploitation in the wild, and the flaw is not listed in CISA's Known Exploited Vulnerabilities catalog.

What to do: Restrict network access to CPSL-08P1EN devices so that the vulnerable management/control interface is reachable only from a trusted management VLAN or over a VPN, and never expose it directly to the internet. Check the vendor's security page and the JPCERT/CC (JVN) advisory for a firmware update and apply it as soon as one is released. Until patched, monitor the device's logs and network traffic for unauthenticated commands or unexpected configuration changes.