Approved changes feed: RSS · Atom

cpe:2.3:h:copeland:xweb_500d_pro:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorCopeland (0337f2ca-87d7-5998-8541-ed674a0ef7b2)
ProductXweb 500D Pro (31ba7920-ff4c-53e4-9d2c-309b77dcd18d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3037 not_vulnerable 2026-06-08 08:01:17.384473 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by modifying malicious input injected into the MBird SMS service URL and/or code via the utility route which is later processed during system setup, leading to remote code execution.
Published: 2026-02-27T01:06:42.223Z
Updated: 2026-02-27T19:09:35.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25721 not_vulnerable 2026-06-08 07:53:20.256533 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the server username and/or password fields of the restore action in the API V1 route.
Published: 2026-02-27T00:55:28.813Z
Updated: 2026-03-02T14:28:34.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25196 not_vulnerable 2026-06-08 07:53:19.485329 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is processed.
Published: 2026-02-27T00:58:08.674Z
Updated: 2026-03-02T14:27:46.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25195 not_vulnerable 2026-06-08 07:53:19.484127 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying a crafted firmware update file via the firmware update route.
Published: 2026-02-27T00:45:04.949Z
Updated: 2026-03-02T14:30:03.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25111 not_vulnerable 2026-06-08 07:53:18.999924 Copeland XWEB and XWEB Pro OS Command Injection
HIGH (8)
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the restore route.
Published: 2026-02-27T00:40:37.734Z
Updated: 2026-03-02T18:44:08.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25109 not_vulnerable 2026-06-08 07:53:18.992218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25105 not_vulnerable 2026-06-08 07:53:18.975878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25085 not_vulnerable 2026-06-08 07:53:18.937141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25037 not_vulnerable 2026-06-08 07:53:18.874839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24695 not_vulnerable 2026-06-08 07:51:17.989600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24689 not_vulnerable 2026-06-08 07:51:17.985348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24663 not_vulnerable 2026-06-08 07:51:17.967457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24517 not_vulnerable 2026-06-08 07:51:17.786596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24452 not_vulnerable 2026-06-08 07:51:17.695174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23702 not_vulnerable 2026-06-08 07:51:16.030514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22877 not_vulnerable 2026-06-08 07:51:14.069450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21718 not_vulnerable 2026-06-08 07:49:16.706419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21389 not_vulnerable 2026-06-08 07:49:16.332909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20910 not_vulnerable 2026-06-08 07:49:13.402883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20902 not_vulnerable 2026-06-08 07:49:13.401384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20797 not_vulnerable 2026-06-08 07:49:12.630009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20764 not_vulnerable 2026-06-08 07:49:12.535376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20742 not_vulnerable 2026-06-08 07:49:12.522214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.