Skip to content
OpenAdvisories

Product · Copeland

XWEB EVO

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-124015

    Dixell/Copeland XWEB EVO Authentication Bypass via users.lua

    XWEB EVO 5.6.2 through 5.8.8 contains an authentication bypass vulnerability that allows unauthenticated attackers to set the password of any account flagged must-reset-at-next-login by exploiting missing session validation in the users.lua update_password ac…

    Copeland XWEB EVO
  • Medium 5.3
    CVE-2026-124011

    Dixell/Copeland XWEB EVO Information Disclosure via sysinfo.lua

    XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the device's eth0 MAC address and system clock by accessing sysinfo.lua, which also feeds the pre-login page. Attackers can use the d…

    Copeland XWEB EVO