CVE-2026-20764Disclosure(copeland / xweb_300d_pro)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing malicious input via the device hostname configuration which is later processed during system setup, resulting in remote code execution.

copeland CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xweb_300d_pro
xweb_300d_pro_firmware
xweb_500b_pro
xweb_500b_pro_firmware

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 2 mentions (2026-02-27); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

copeland

Products

xweb_300d_proxweb_300d_pro_firmwarexweb_500b_proxweb_500b_pro_firmwarexweb_500d_proxweb_500d_pro_firmware

1 version affected across 6 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1

Full discourse4 posts

CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2026-20764 (CVSS:8.0, HIGH) is Analyzed. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-20764 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-20764, an OS command injection in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, or patch information.
0000022
173 followersView on X
CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-20764 (CVSS:8.0, HIGH) is Analyzed. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-20764 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-20764, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but does not mention PoC, exploit, or patch.
0000035
173 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-20764 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system… https://www.cve.org/CVERecord?id=CVE-2026-20764
Post summary
CVE-2026-20764 is an OS command injection vulnerability in XWEB Pro that permits authenticated attackers to execute arbitrary code on affected systems.
00000120
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds223d
Disclosure
CVE-2026-20764 OS Command Injection in XWEB Pro v1.12.1 Enables Remote C... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20764 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
CVE-2026-20764 is an OS Command Injection vulnerability in XWEB Pro v1.12.1 that could enable remote command execution; the text provides technical details but no PoC, exploit, patch, or evidence of active exploitation.
0000035
4.0K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	copeland	xweb_300d_pro	-	-	-
OS	copeland	xweb_300d_pro_firmware	-	-	-
HW	copeland	xweb_500b_pro	-	-	-
OS	copeland	xweb_500b_pro_firmware	-	-	-
HW	copeland	xweb_500d_pro	-	-	-
OS	copeland	xweb_500d_pro_firmware	-	-	-

Explore more

Back to dashboard copeland CVEs xweb_300d_pro vulnerabilities

What researchers are saying

CVE-2026-20764

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-20764, an OS command injection in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-20764, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but does not mention PoC, exploit, or patch.

CVE@CVEnewDisclosure

CVE-2026-20764 is an OS command injection vulnerability in XWEB Pro that permits authenticated attackers to execute arbitrary code on affected systems.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

CVE-2026-20764 is an OS Command Injection vulnerability in XWEB Pro v1.12.1 that could enable remote command execution; the text provides technical details but no PoC, exploit, patch, or evidence of active exploitation.