Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field when accessing the get setup route.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 6 products
| Date | Total | Labels |
|---|
| 2026-02-27 | 1 | Disclosure1 |
| 2026-03-03 | 1 | General1 |
| 2026-03-04 | 1 | General1 |
| 2026-03-10 | 1 | Disclosure1 |
🔴 Copeland XWEB Pro, #OS Command Injection, #CVE-2026-25109 (High) https://dailycve.com/copeland-xweb-pro-os-command-injection-cve-2026-25109-high/
Post summary
A new OS Command Injection vulnerability (CVE-2026-25109) in Copeland XWEB Pro has been disclosed with a high severity rating.
CVE-2026-25109 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke..https://nvd.nist.gov/vuln/detail/CVE-2026-25109 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-25109, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but does not provide PoC, exploit, patch, or active exploitation details.
CVE-2026-25109 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacke..https://nvd.nist.gov/vuln/detail/CVE-2026-25109 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-25109, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no evidence of exploitation, PoC, or patch.
CVE-2026-25109 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the syst… https://www.cve.org/CVERecord?id=CVE-2026-25109
Post summary
The text announces CVE‑2026‑25109 as an OS command injection vulnerability in XWEB Pro, allowing authenticated attackers to execute remote code; it lacks PoC, exploit, or patch information.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | copeland | xweb_300d_pro | - | - | - |
| OS | copeland | xweb_300d_pro_firmware | - | - | - |
| HW | copeland | xweb_500b_pro | - | - | - |
| OS | copeland | xweb_500b_pro_firmware | - | - | - |
| HW | copeland | xweb_500d_pro | - | - | - |
| OS | copeland | xweb_500d_pro_firmware | - | - | - |