Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field of the firmware update apply action.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 6 products
🔴 Copeland XWEB Pro, #OS Command Injection, #CVE-2026-24689 (HIGH) https://dailycve.com/copeland-xweb-pro-os-command-injection-cve-2026-24689-high/
Post summary
This brief notice announces a high‑severity OS command injection vulnerability (CVE‑2026‑24689) in Copeland XWEB Pro, but provides no PoC, exploit, active use, patch, or debunking information.
CVE-2026-24689 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker..https://nvd.nist.gov/vuln/detail/CVE-2026-24689 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-24689, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but no PoC, exploit, or patch details are provided.
CVE-2026-24689 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker..https://nvd.nist.gov/vuln/detail/CVE-2026-24689 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-24689, an OS command injection in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-24689 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the syste… https://www.cve.org/CVERecord?id=CVE-2026-24689
Post summary
The post announces CVE‑2026‑24689, detailing an OS command injection in XWEB Pro 1.12.1 and earlier that allows authenticated attackers to execute arbitrary code. No PoC, exploit, active use, or patch information is provided.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | copeland | xweb_300d_pro | - | - | - |
| OS | copeland | xweb_300d_pro_firmware | - | - | - |
| HW | copeland | xweb_500b_pro | - | - | - |
| OS | copeland | xweb_500b_pro_firmware | - | - | - |
| HW | copeland | xweb_500d_pro | - | - | - |
| OS | copeland | xweb_500d_pro_firmware | - | - | - |