NetSight
critical10.0

CVE-2026-21718

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement an…

Impact

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

Affected products

VendorProductAffected versions
CopelandXweb 300d Pro Firmware
through 1.12.1
CopelandXweb 500d Pro Firmware
through 1.12.1
CopelandXweb 500b Pro Firmware
through 1.12.1

Weakness classification

References