CVE-2026-25195Disclosure(copeland / xweb_300d_pro)

LOWCVSS 6.6 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by supplying a crafted firmware update file via the firmware update route.

copeland CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xweb_300d_pro
xweb_300d_pro_firmware
xweb_500b_pro
xweb_500b_pro_firmware

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 2d ago at 2 mentions (2026-02-27); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

copeland

Products

xweb_300d_proxweb_300d_pro_firmwarexweb_500b_proxweb_500b_pro_firmwarexweb_500d_proxweb_500d_pro_firmware

1 version affected across 6 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

250.0%

General

250.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-03	1	General1
2026-03-04	1	General1

Full discourse4 posts

Vulmon Vulnerability Feed@VulmonFeeds224d
Disclosure
CVE-2026-25195 OS Command Injection in XWEB Pro v1.12.1 Enabling Authenticated Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25195
Post summary
The post announces CVE-2026-25195 as an OS Command Injection in XWEB Pro v1.12.1 that allows authenticated remote code execution, with no PoC or exploit details provided.
0001031
4.0K followersView on X
CRAC Learning - Tech@cracbot219d
General
CVE-2026-25195 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attack..https://nvd.nist.gov/vuln/detail/CVE-2026-25195 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-25195, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no evidence of exploitation, patches, or PoC.
0000026
173 followersView on X
CRAC Learning - Tech@cracbot220d
General
CVE-2026-25195 (CVSS:8.0, HIGH) is Undergoing Analysis. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attack..https://nvd.nist.gov/vuln/detail/CVE-2026-25195 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post references CVE-2026-25195, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier with a CVSS score of 8.0, but it does not provide PoC, exploit, patch, or active exploitation details.
0000040
173 followersView on X
CVE@CVEnew224d
Disclosure
CVE-2026-25195 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the sys… https://www.cve.org/CVERecord?id=CVE-2026-25195
Post summary
The text announces CVE-2026-25195 as an OS command injection vulnerability in XWEB Pro <=1.12.1 that allows authenticated attackers to achieve remote code execution; no PoC, exploit, patch, or active exploitation is discussed.
00000143
56.6K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	copeland	xweb_300d_pro	-	-	-
OS	copeland	xweb_300d_pro_firmware	-	-	-
HW	copeland	xweb_500b_pro	-	-	-
OS	copeland	xweb_500b_pro_firmware	-	-	-
HW	copeland	xweb_500d_pro	-	-	-
OS	copeland	xweb_500d_pro_firmware	-	-	-

Explore more

Back to dashboard copeland CVEs xweb_300d_pro vulnerabilities

What researchers are saying

CVE-2026-25195

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-25195 as an OS Command Injection in XWEB Pro v1.12.1 that allows authenticated remote code execution, with no PoC or exploit details provided.

CRAC Learning - Tech@cracbotGeneral

The post announces CVE-2026-25195, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with a CVSS score of 8.0, but provides no evidence of exploitation, patches, or PoC.

CRAC Learning - Tech@cracbotGeneral

The post references CVE-2026-25195, noting it is an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier with a CVSS score of 8.0, but it does not provide PoC, exploit, patch, or active exploitation details.

CVE@CVEnewDisclosure

The text announces CVE-2026-25195 as an OS command injection vulnerability in XWEB Pro <=1.12.1 that allows authenticated attackers to achieve remote code execution; no PoC, exploit, patch, or active exploitation is discussed.