CVE-2026-25196Disclosure(copeland / xweb_300d_pro)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the Wi-Fi SSID and/or password fields can lead to remote code execution when the configuration is processed.

copeland CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

xweb_300d_pro
xweb_300d_pro_firmware
xweb_500b_pro
xweb_500b_pro_firmware

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 2 mentions (2026-02-27); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

copeland

Products

xweb_300d_proxweb_300d_pro_firmwarexweb_500b_proxweb_500b_pro_firmwarexweb_500d_proxweb_500d_pro_firmware

1 version affected across 6 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1

Full discourse4 posts

CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2026-25196 (CVSS:8.0, HIGH) is Analyzed. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-25196 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-25196, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with CVSS 8.0, but does not mention PoC, exploit, patch, or active exploitation.
0000024
173 followersView on X
CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-25196 (CVSS:8.0, HIGH) is Analyzed. An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker ..https://nvd.nist.gov/vuln/detail/CVE-2026-25196 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-25196, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with CVSS 8.0, but does not mention PoC, exploit, patch, or active exploitation.
0000036
173 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-25196 An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system… https://www.cve.org/CVERecord?id=CVE-2026-25196
Post summary
The post discloses an OS command injection vulnerability in XWEB Pro that permits authenticated users to achieve remote code execution.
00000116
56.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds223d
Disclosure
CVE-2026-25196 OS Command Injection in XWEB Pro v1.12.1 Enables Authenticated Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25196
Post summary
A new vulnerability (CVE-2026-25196) in XWEB Pro v1.12.1 is disclosed, describing an OS command injection that permits authenticated remote code execution.
0000035
4.0K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	copeland	xweb_300d_pro	-	-	-
OS	copeland	xweb_300d_pro_firmware	-	-	-
HW	copeland	xweb_500b_pro	-	-	-
OS	copeland	xweb_500b_pro_firmware	-	-	-
HW	copeland	xweb_500d_pro	-	-	-
OS	copeland	xweb_500d_pro_firmware	-	-	-

Explore more

Back to dashboard copeland CVEs xweb_300d_pro vulnerabilities

What researchers are saying

CVE-2026-25196

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-25196, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with CVSS 8.0, but does not mention PoC, exploit, patch, or active exploitation.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-25196, an OS command injection vulnerability in XWEB Pro 1.12.1 and earlier, with CVSS 8.0, but does not mention PoC, exploit, patch, or active exploitation.

CVE@CVEnewDisclosure

The post discloses an OS command injection vulnerability in XWEB Pro that permits authenticated users to achieve remote code execution.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new vulnerability (CVE-2026-25196) in XWEB Pro v1.12.1 is disclosed, describing an OS command injection that permits authenticated remote code execution.