← Vulnerability feed

Vulnerability record · CVE-2026-25085 · published 27 February 2026

CVE-2026-25085: Copeland xweb 500b pro firmware vulnerability

Copeland · Xweb 500b Pro Firmware

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

9.8 CVSS 3.1 Critical EPSS 0.50% · top 59.7% CWE-394 · CWE-394
9.8CVSS 3.1 base score
0.50%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json Third Party Advisory
https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate Product
https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10 Third Party AdvisoryUS Government Resource

Track CVE-2026-25085 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-20797Copeland xweb 300d pro firmware out-of-bounds write vulnerabilityA stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corrupti…EPSS 0.82%9.8CVE-2026-21718Copeland xweb 300d pro firmware broken cryptographic algorithm vulnerabilityAn authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requ…EPSS 0.44%9.8CVE-2026-24663Copeland xweb 500b pro firmware os command injection vulnerabilityAn OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execut…EPSS 2.2%9.1CVE-2026-22877Copeland xweb 300d pro firmware path traversal vulnerabilityAn arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the s…EPSS 0.57%8.8CVE-2026-25196Copeland xweb 300d pro firmware os command injection vulnerabilityAn OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code executio…EPSS 1.9%8.8CVE-2026-25721Copeland xweb 300d pro firmware os command injection vulnerabilityAn OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code executio…EPSS 2.6%8.8CVE-2026-3037Copeland xweb 300d pro firmware os command injection vulnerabilityAn OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code executio…EPSS 2.6%8.8CVE-2026-25037Copeland xweb 300d pro firmware os command injection vulnerabilityAn OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code executio…EPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2026-25085), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.