CVE-2026-25111Disclosure(copeland / xweb_300d_pro)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the restore route.

copeland CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xweb_300d_pro
xweb_300d_pro_firmware
xweb_500b_pro
xweb_500b_pro_firmware

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 3d ago at 2 mentions (2026-02-27); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

copeland

Products

xweb_300d_proxweb_300d_pro_firmwarexweb_500b_proxweb_500b_pro_firmwarexweb_500d_proxweb_500d_pro_firmware

1 version affected across 6 products

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-03	1	General1
2026-03-04	1	Disclosure1
2026-03-10	1	Disclosure1

Full discourse5 posts

DailyCVE@dailycve214d
Disclosure
🔴 Copeland XWEB Pro, #OS Command Injection, #CVE-2026-25111 (High) https://dailycve.com/copeland-xweb-pro-os-command-injection-cve-2026-25111-high/
Post summary
The text announces the disclosure of a high‑severity OS Command Injection vulnerability (CVE‑2026‑25111) affecting Copeland XWEB Pro, with basic technical details but no PoC, exploit, or patch information.
0000032
166 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-25111 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-25111 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-25111, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, or patch details.
0000023
173 followersView on X
CRAC Learning - Tech@cracbot221d
General
CVE-2026-25111 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-25111 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-25111, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but does not provide PoC, exploit, patch, or active exploitation details.
0000039
173 followersView on X
CVE@CVEnew225d
Disclosure
CVE-2026-25111 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system… https://www.cve.org/CVERecord?id=CVE-2026-25111
Post summary
The post announces CVE‑2026‑25111 as an OS command injection flaw in XWEB Pro 1.12.1 and prior versions, enabling authenticated attackers to execute remote code. No PoC, exploit code, patch, or active exploitation details are provided.
00000137
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds225d
Disclosure
CVE-2026-25111 OS Command Injection in XWEB Pro 1.12.1 Enables Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25111
Post summary
CVE-2026-25111 identifies an OS Command Injection in XWEB Pro 1.12.1 that allows remote code execution; the post provides technical details but no PoC, exploit code, active exploitation, or patch information.
0000031
4.0K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	copeland	xweb_300d_pro	-	-	-
OS	copeland	xweb_300d_pro_firmware	-	-	-
HW	copeland	xweb_500b_pro	-	-	-
OS	copeland	xweb_500b_pro_firmware	-	-	-
HW	copeland	xweb_500d_pro	-	-	-
OS	copeland	xweb_500d_pro_firmware	-	-	-

Explore more

Back to dashboard copeland CVEs xweb_300d_pro vulnerabilities

What researchers are saying

CVE-2026-25111

DailyCVE@dailycveDisclosure

The text announces the disclosure of a high‑severity OS Command Injection vulnerability (CVE‑2026‑25111) affecting Copeland XWEB Pro, with basic technical details but no PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-25111, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no PoC, exploit, or patch details.

CRAC Learning - Tech@cracbotGeneral

The post references CVE-2026-25111, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but does not provide PoC, exploit, patch, or active exploitation details.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑25111 as an OS command injection flaw in XWEB Pro 1.12.1 and prior versions, enabling authenticated attackers to execute remote code. No PoC, exploit code, patch, or active exploitation details are provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

CVE-2026-25111 identifies an OS Command Injection in XWEB Pro 1.12.1 that allows remote code execution; the post provides technical details but no PoC, exploit code, active exploitation, or patch information.