Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-25085

Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Copeland Copeland XWEB 300D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500D PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

Copeland Copeland XWEB 500B PRO

Default version status: unaffected

  • 0 to ≤ 1.12.1affected

References