← Database

CVE-2026-25085

HIGH CVSS: 8.6 Published: 2026-02-27 Modified: 2026-06-17

Description

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

Affected Platforms

Copeland Xweb 500B ProCopeland Xweb 300D Pro FirmwareCopeland Xweb 500D ProCopeland Xweb 500D Pro FirmwareCopeland Xweb 300D ProCopeland Xweb 500B Pro Firmware

Weakness Type

CWE-394

References