Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-22877

Copeland XWEB and XWEB Pro Path Traversal

Description

An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potentially causing a denial-of-service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Copeland Copeland XWEB 300D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500B PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

References