Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the firmware update route.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 6 products
🔴 Copeland XWEB Pro, #OS Command Injection, #CVE-2026-24517 (High) https://dailycve.com/copeland-xweb-pro-os-command-injection-cve-2026-24517-high/
Post summary
The post announces the discovery of a high‑severity OS Command Injection vulnerability (CVE‑2026‑24517) in Copeland XWEB Pro, without providing any PoC, exploit, or patch details.
CVE-2026-24517 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke..https://nvd.nist.gov/vuln/detail/CVE-2026-24517 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-24517, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, patch, or active exploitation details.
CVE-2026-24517 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke..https://nvd.nist.gov/vuln/detail/CVE-2026-24517 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-24517, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with CVSS 8.0, but provides no PoC, exploit, patch, or active exploitation details.
CVE-2026-24517 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the syst… https://www.cve.org/CVERecord?id=CVE-2026-24517
Post summary
The post announces CVE-2026-24517, detailing an OS command injection that permits authenticated remote code execution on XWEB Pro versions 1.12.1 and earlier.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | copeland | xweb_300d_pro | - | - | - |
| OS | copeland | xweb_300d_pro_firmware | - | - | - |
| HW | copeland | xweb_500b_pro | - | - | - |
| OS | copeland | xweb_500b_pro_firmware | - | - | - |
| HW | copeland | xweb_500d_pro | - | - | - |
| OS | copeland | xweb_500d_pro_firmware | - | - | - |