high8.6
CVE-2026-25085
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed…
Impact
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Copeland | Xweb 500b Pro Firmware | through 1.12.1 |
| Copeland | Xweb 300d Pro Firmware | through 1.12.1 |
| Copeland | Xweb 500d Pro Firmware | through 1.12.1 |