← Database

CVE-2026-20797

MEDIUM CVSS: 4.3 Published: 2026-02-27 Modified: 2026-06-17

Description

A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the program.

Affected Platforms

Copeland Xweb 500B ProCopeland Xweb 300D Pro FirmwareCopeland Xweb 500D ProCopeland Xweb 500D Pro FirmwareCopeland Xweb 300D ProCopeland Xweb 500B Pro Firmware

Weakness Type

CWE-787, CWE-121

References