Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-21718

Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Copeland Copeland XWEB 300D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500B PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

References