CVE-2026-24452
EUVD-2026-897527.02.2026, 02:16
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying a crafted template file to the devices route.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| copeland | xweb_300d_pro_firmware | 𝑥 ≤ 1.12.1 |
| copeland | xweb_500d_pro_firmware | 𝑥 ≤ 1.12.1 |
| copeland | xweb_500b_pro_firmware | 𝑥 ≤ 1.12.1 |
𝑥
= Vulnerable software versions