Description
An authentication bypass vulnerability exists in Copeland XWEB Pro
version 1.12.1 and prior, enabling any attackers to bypass the
authentication requirement and achieve pre-authenticated code execution
on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Copeland | Copeland XWEB 300D PRO | ≤ 1.12.1 | — |
| Copeland | Copeland XWEB 500D PRO | ≤ 1.12.1 | — |
| Copeland | Copeland XWEB 500B PRO | ≤ 1.12.1 | — |
Advisories 1
- ICSA-26-057-10 Copeland XWEB and XWEB Pro CISA ICS & IT advisories · Feb 26, 2026