CVE-2026-25085Disclosure(copeland / xweb_300d_pro)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

copeland CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

Weakness type (CWE)

CWE-394

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xweb_300d_pro
xweb_300d_pro_firmware
xweb_500b_pro
xweb_500b_pro_firmware

Threat summary

7 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 7 signals
Disclosure: 6 classified signals
General: 1 classified signal
Peaked 3d ago at 4 mentions (2026-02-27); latest day: 1
7 total mentions across 4 days

Affected systems

Vendors

copeland

Products

xweb_300d_proxweb_300d_pro_firmwarexweb_500b_proxweb_500b_pro_firmwarexweb_500d_proxweb_500d_pro_firmware

1 version affected across 6 products

Deep dive

Activity timeline7 mentions / 4d

Signal classification2 categories

Disclosure

685.7%

General

114.3%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	4	Disclosure4
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1
2026-03-10	1	General1

Full discourse7 posts

Vulmon Vulnerability Feed@VulmonFeeds226d
Disclosure
CVE-2026-25085 Authentication Bypass Vulnerability in Copeland XWEB Pro Version 1.12.1 and Prior https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25085
Post summary
The text announces an authentication bypass vulnerability affecting Copeland XWEB Pro 1.12.1 and earlier, without providing PoC, exploit code, or patch details.
0000136
4.0K followersView on X
DailyCVE@dailycve215d
General
🔴 Copeland XWEB Pro, Authentication Bypass, #CVE-2026-25085 (High) https://dailycve.com/copeland-xweb-pro-authentication-bypass-cve-2026-25085-high/
Post summary
CVE-2026-25085 is an authentication bypass flaw in Copeland XWEB Pro, identified as high severity, but the provided text offers no details on PoC, exploit availability, active exploitation, patches, or debunking.
0000033
166 followersView on X
CRAC Learning - Tech@cracbot221d
Disclosure
CVE-2026-25085 (CVSS:8.6, HIGH) is Undergoing Analysis. A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the auth..https://nvd.nist.gov/vuln/detail/CVE-2026-25085 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-25085, a high‑severity vulnerability in Copeland XWEB Pro, noting its CVSS score and affected versions, but provides no evidence of exploitation or mitigation.
0000019
173 followersView on X
CRAC Learning - Tech@cracbot222d
Disclosure
CVE-2026-25085 (CVSS:8.6, HIGH) is Undergoing Analysis. A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the auth..https://nvd.nist.gov/vuln/detail/CVE-2026-25085 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-25085 is a high‑severity vulnerability affecting Copeland XWEB Pro 1.12.1 and earlier, involving an unexpected return value from the authentication process, and is currently under analysis.
0000038
173 followersView on X
CVE@CVEnew225d
Disclosure
CVE-2026-25085 A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a… https://www.cve.org/CVERecord?id=CVE-2026-25085
Post summary
A disclosure of CVE-2026-25085 affecting Copeland XWEB Pro 1.12.1 and earlier, involving an unexpected return value from the authentication routine being incorrectly processed.
00000152
56.6K followersView on X
CVEFind.com@CveFindCom226d
Disclosure
[CVE-2026-25085: HIGH] Copeland XWEB Pro version 1.12.1 & prior have a critical security flaw allowing authentication bypass due to improper processing of return values. #CyberSecurity#cve,CVE-2026-25085,#cybersecurity https://cvefind.com/CVE-2026-25085
Post summary
The post discloses a high‑severity authentication bypass vulnerability in Copeland XWEB Pro 1.12.1 and earlier, caused by improper handling of return values.
0000044
585 followersView on X
CVETodo@CveTodo226d
Disclosure
**CVE-2026-25085** pertains to a security flaw in **Copeland XWEB Pro version 1.12.1 and earlier**. The core issue involves an **authentication bypass** caused by improper handling of return values from the authentication routine. Specifically, the software processes an unexpected return value as if it were legitimate, allowing an attacker to bypass authentication controls. #Cybersecurity #CVE #HighSeverity #SecurityAlert #AuthBypass https://cvetodo.com/cve/CVE-2026-25085
Post summary
CVE-2026-25085 is an authentication bypass in Copeland XWEB Pro due to mishandling of return values, with no known exploitation or patches reported.
0000036
20 followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	copeland	xweb_300d_pro	-	-	-
OS	copeland	xweb_300d_pro_firmware	-	-	-
HW	copeland	xweb_500b_pro	-	-	-
OS	copeland	xweb_500b_pro_firmware	-	-	-
HW	copeland	xweb_500d_pro	-	-	-
OS	copeland	xweb_500d_pro_firmware	-	-	-

Explore more

Back to dashboard copeland CVEs xweb_300d_pro vulnerabilities

What researchers are saying

CVE-2026-25085

CVETodo[verified]@CveTodoDisclosure

CVE-2026-25085 is an authentication bypass in Copeland XWEB Pro due to mishandling of return values, with no known exploitation or patches reported.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces an authentication bypass vulnerability affecting Copeland XWEB Pro 1.12.1 and earlier, without providing PoC, exploit code, or patch details.

DailyCVE@dailycveGeneral

CVE-2026-25085 is an authentication bypass flaw in Copeland XWEB Pro, identified as high severity, but the provided text offers no details on PoC, exploit availability, active exploitation, patches, or debunking.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-25085, a high‑severity vulnerability in Copeland XWEB Pro, noting its CVSS score and affected versions, but provides no evidence of exploitation or mitigation.

CRAC Learning - Tech@cracbotDisclosure

CVE-2026-25085 is a high‑severity vulnerability affecting Copeland XWEB Pro 1.12.1 and earlier, involving an unexpected return value from the authentication process, and is currently under analysis.

CVE@CVEnewDisclosure

A disclosure of CVE-2026-25085 affecting Copeland XWEB Pro 1.12.1 and earlier, involving an unexpected return value from the authentication routine being incorrectly processed.

CVEFind.com@CveFindComDisclosure

The post discloses a high‑severity authentication bypass vulnerability in Copeland XWEB Pro 1.12.1 and earlier, caused by improper handling of return values.