Approved changes feed: RSS · Atom

cpe:2.3:h:copeland:xweb_300d_pro:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorCopeland (0337f2ca-87d7-5998-8541-ed674a0ef7b2)
ProductXweb 300D Pro (a3487603-36ce-5b89-b3e8-129f63c1df16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3037 not_vulnerable 2026-06-08 08:01:17.382555 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by modifying malicious input injected into the MBird SMS service URL and/or code via the utility route which is later processed during system setup, leading to remote code execution.
Published: 2026-02-27T01:06:42.223Z
Updated: 2026-02-27T19:09:35.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25721 not_vulnerable 2026-06-08 07:53:20.256489 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the server username and/or password fields of the restore action in the API V1 route.
Published: 2026-02-27T00:55:28.813Z
Updated: 2026-03-02T14:28:34.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25196 not_vulnerable 2026-06-08 07:53:19.485139 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is processed.
Published: 2026-02-27T00:58:08.674Z
Updated: 2026-03-02T14:27:46.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25195 not_vulnerable 2026-06-08 07:53:19.483817 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying a crafted firmware update file via the firmware update route.
Published: 2026-02-27T00:45:04.949Z
Updated: 2026-03-02T14:30:03.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25111 not_vulnerable 2026-06-08 07:53:18.999767 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the restore route.
Published: 2026-02-27T00:40:37.734Z
Updated: 2026-03-02T18:44:08.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25109 not_vulnerable 2026-06-08 07:53:18.991967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25105 not_vulnerable 2026-06-08 07:53:18.975757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25085 not_vulnerable 2026-06-08 07:53:18.936948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25037 not_vulnerable 2026-06-08 07:53:18.873639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24695 not_vulnerable 2026-06-08 07:51:17.989466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24689 not_vulnerable 2026-06-08 07:51:17.985307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24663 not_vulnerable 2026-06-08 07:51:17.967314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24517 not_vulnerable 2026-06-08 07:51:17.786361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24452 not_vulnerable 2026-06-08 07:51:17.695123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23702 not_vulnerable 2026-06-08 07:51:16.030473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22877 not_vulnerable 2026-06-08 07:51:14.067867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21718 not_vulnerable 2026-06-08 07:49:16.706305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21389 not_vulnerable 2026-06-08 07:49:16.332787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20910 not_vulnerable 2026-06-08 07:49:13.402738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20902 not_vulnerable 2026-06-08 07:49:13.401319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20797 not_vulnerable 2026-06-08 07:49:12.629855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20764 not_vulnerable 2026-06-08 07:49:12.535230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20742 not_vulnerable 2026-06-08 07:49:12.520894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.