An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achiev…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 27, 2026 · NIST NVD

   Detected

   An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

2. Jun 17, 2026 · NIST NVD

   Updated

   An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

Affected

• cpe copeland/xweb 300d pro firmwareversion unspecified
• cpe copeland/xweb 500b pro firmwareversion unspecified
• cpe copeland/xweb 500d pro firmwareversion unspecified

Sources

• NIST NVDVulnerability recordCVE-2026-21718

  An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

  nvd.nist.gov

References

• Third Party Advisory · github.com
• Product · webapps.copeland.com
• Third Party Advisory · cisa.gov