Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the program.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 6 products
CVE-2026-20797 A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termin… https://www.cve.org/CVERecord?id=CVE-2026-20797
Post summary
The entry announces CVE-2026-20797 as a stack-based buffer overflow in XWEB Pro that allows unauthenticated attackers to corrupt the stack.
CVE-2026-20797 Stack-Based Buffer Overflow in XWEB Pro API Route Enables Unauthenticated Remote Crash https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20797
Post summary
The post announces a stack‑based buffer overflow in XWEB Pro’s API route that can crash the system for unauthenticated users, but it lacks PoC, exploit, patch, or active exploitation details.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | copeland | xweb_300d_pro | - | - | - |
| OS | copeland | xweb_300d_pro_firmware | - | - | - |
| HW | copeland | xweb_500b_pro | - | - | - |
| OS | copeland | xweb_500b_pro_firmware | - | - | - |
| HW | copeland | xweb_500d_pro | - | - | - |
| OS | copeland | xweb_500d_pro_firmware | - | - | - |