{"schema_version":1,"title":"Copeland XWEB EVO vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Copeland XWEB EVO: 14 in the last 7 days and 14 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124015, was published on 12 November 2026. Nothing was published in the last eight weeks.","url":"https://junglewise.ai/threats/technologies/xweb-evo","json_url":"https://junglewise.ai/threats/technologies/xweb-evo.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/xweb-evo","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":8,"all_time":14,"critical":4,"exploited":0,"last_7_days":14,"last_30_days":14,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2026-124015","cvss":5.9,"slug":"cve-2026-124015-xweb-evo-5-6-2-through-5-8-8-contains-an-authentication-bypass","title":"Copeland XWEB EVO authentication bypass in password reset","severity":"medium","exploited":false,"published_at":"2026-11-12T20:18:26.277+00:00","url":"https://junglewise.ai/threats/cve-2026-124015-xweb-evo-5-6-2-through-5-8-8-contains-an-authentication-bypass"},{"cve":"CVE-2026-124014","cvss":9.1,"slug":"cve-2026-124014-xweb-evo-4-3-0-through-5-8-8-contains-an-unauthenticated","title":"Copeland XWEB EVO arbitrary file write","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:25.59+00:00","url":"https://junglewise.ai/threats/cve-2026-124014-xweb-evo-4-3-0-through-5-8-8-contains-an-unauthenticated"},{"cve":"CVE-2026-124013","cvss":8.8,"slug":"cve-2026-124013-xweb-evo-5-6-2-through-5-8-8-contains-an-authenticated-os","title":"Copeland XWEB EVO OS command injection in api.lua","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:25.237+00:00","url":"https://junglewise.ai/threats/cve-2026-124013-xweb-evo-5-6-2-through-5-8-8-contains-an-authenticated-os"},{"cve":"CVE-2026-124012","cvss":8.1,"slug":"cve-2026-124012-xweb-evo-5-6-2-through-5-8-8-contains-a-hardcoded-credential","title":"Copeland XWEB EVO hardcoded credential authentication bypass","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:24.97+00:00","url":"https://junglewise.ai/threats/cve-2026-124012-xweb-evo-5-6-2-through-5-8-8-contains-a-hardcoded-credential"},{"cve":"CVE-2026-124011","cvss":5.3,"slug":"cve-2026-124011-xweb-evo-5-6-2-through-5-8-8-contains-an-information-disclosure","title":"Copeland XWEB EVO information disclosure in sysinfo.lua","severity":"medium","exploited":false,"published_at":"2026-11-12T20:18:24.67+00:00","url":"https://junglewise.ai/threats/cve-2026-124011-xweb-evo-5-6-2-through-5-8-8-contains-an-information-disclosure"},{"cve":"CVE-2026-124010","cvss":9.8,"slug":"cve-2026-124010-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability","title":"Copeland XWEB EVO command injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:24.263+00:00","url":"https://junglewise.ai/threats/cve-2026-124010-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability"},{"cve":"CVE-2026-124009","cvss":7.2,"slug":"cve-2026-124009-xweb-evo-5-2-3-through-5-8-8-contains-an-authenticated-os","title":"Copeland XWEB EVO OS command injection","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.96+00:00","url":"https://junglewise.ai/threats/cve-2026-124009-xweb-evo-5-2-3-through-5-8-8-contains-an-authenticated-os"},{"cve":"CVE-2026-124008","cvss":7.2,"slug":"cve-2026-124008-xweb-evo-5-2-3-through-5-8-8-contains-an-authenticated-os","title":"Copeland XWEB EVO OS command injection in devices.lua template","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.653+00:00","url":"https://junglewise.ai/threats/cve-2026-124008-xweb-evo-5-2-3-through-5-8-8-contains-an-authenticated-os"},{"cve":"CVE-2026-124007","cvss":8.1,"slug":"cve-2026-124007-xweb-evo-before-5-6-2-contains-a-pre-authentication-os-command","title":"Copeland XWEB EVO pre-authentication OS command injection","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.387+00:00","url":"https://junglewise.ai/threats/cve-2026-124007-xweb-evo-before-5-6-2-contains-a-pre-authentication-os-command"},{"cve":"CVE-2026-124006","cvss":8.1,"slug":"cve-2026-124006-xweb-evo-through-5-8-8-contains-a-predictable-credential","title":"Copeland XWEB EVO predictable credential generation","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.033+00:00","url":"https://junglewise.ai/threats/cve-2026-124006-xweb-evo-through-5-8-8-contains-a-predictable-credential"},{"cve":"CVE-2026-124005","cvss":8.1,"slug":"cve-2026-124005-xweb-evo-4-3-0-through-5-8-8-contains-a-weak-password-generation","title":"Copeland XWEB EVO weak password generation vulnerability","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:22.673+00:00","url":"https://junglewise.ai/threats/cve-2026-124005-xweb-evo-4-3-0-through-5-8-8-contains-a-weak-password-generation"},{"cve":"CVE-2026-124004","cvss":9.8,"slug":"cve-2026-124004-xweb-evo-before-5-6-2-contains-a-hardcoded-backdoor-password","title":"Copeland XWEB EVO hardcoded backdoor authentication bypass","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:22.367+00:00","url":"https://junglewise.ai/threats/cve-2026-124004-xweb-evo-before-5-6-2-contains-a-hardcoded-backdoor-password"},{"cve":"CVE-2026-124003","cvss":7.8,"slug":"cve-2026-124003-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability","title":"Copeland XWEB EVO command injection in Lua CGI interpreter","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:21.917+00:00","url":"https://junglewise.ai/threats/cve-2026-124003-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability"},{"cve":"CVE-2026-124002","cvss":9.8,"slug":"cve-2026-124002-xweb-evo-versions-5-2-3-through-before-5-7-0-contains-a-pre","title":"Copeland XWEB EVO pre-authentication OS command injection","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:21.597+00:00","url":"https://junglewise.ai/threats/cve-2026-124002-xweb-evo-versions-5-2-3-through-before-5-7-0-contains-a-pre"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":4,"exploited":0,"vulnerabilities":14}],"related":[{"name":"Copeland XWEB 300D PRO","slug":"xweb-300d-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-300d-pro"},{"name":"Copeland Xweb 300d Pro Firmware","slug":"xweb-300d-pro-firmware","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-300d-pro-firmware"},{"name":"Copeland XWEB 500B PRO","slug":"xweb-500b-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-500b-pro"},{"name":"Copeland Xweb 500b Pro Firmware","slug":"xweb-500b-pro-firmware","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-500b-pro-firmware"},{"name":"Copeland XWEB 500D PRO","slug":"xweb-500d-pro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-500d-pro"},{"name":"Copeland Xweb 500d Pro Firmware","slug":"xweb-500d-pro-firmware","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/xweb-500d-pro-firmware"}],"technology":{"hub":true,"name":"Copeland XWEB EVO","slug":"xweb-evo","vendor":{"hub":true,"name":"Copeland","slug":"copeland","url":"https://junglewise.ai/threats/vendors/copeland"},"aliases":[],"category":"appliance","url":"https://junglewise.ai/threats/technologies/xweb-evo"},"most_severe":[{"cve":"CVE-2026-124010","cvss":9.8,"slug":"cve-2026-124010-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability","title":"Copeland XWEB EVO command injection vulnerability","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:24.263+00:00","url":"https://junglewise.ai/threats/cve-2026-124010-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability"},{"cve":"CVE-2026-124004","cvss":9.8,"slug":"cve-2026-124004-xweb-evo-before-5-6-2-contains-a-hardcoded-backdoor-password","title":"Copeland XWEB EVO hardcoded backdoor authentication bypass","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:22.367+00:00","url":"https://junglewise.ai/threats/cve-2026-124004-xweb-evo-before-5-6-2-contains-a-hardcoded-backdoor-password"},{"cve":"CVE-2026-124002","cvss":9.8,"slug":"cve-2026-124002-xweb-evo-versions-5-2-3-through-before-5-7-0-contains-a-pre","title":"Copeland XWEB EVO pre-authentication OS command injection","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:21.597+00:00","url":"https://junglewise.ai/threats/cve-2026-124002-xweb-evo-versions-5-2-3-through-before-5-7-0-contains-a-pre"},{"cve":"CVE-2026-124014","cvss":9.1,"slug":"cve-2026-124014-xweb-evo-4-3-0-through-5-8-8-contains-an-unauthenticated","title":"Copeland XWEB EVO arbitrary file write","severity":"critical","exploited":false,"published_at":"2026-11-12T20:18:25.59+00:00","url":"https://junglewise.ai/threats/cve-2026-124014-xweb-evo-4-3-0-through-5-8-8-contains-an-unauthenticated"},{"cve":"CVE-2026-124013","cvss":8.8,"slug":"cve-2026-124013-xweb-evo-5-6-2-through-5-8-8-contains-an-authenticated-os","title":"Copeland XWEB EVO OS command injection in api.lua","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:25.237+00:00","url":"https://junglewise.ai/threats/cve-2026-124013-xweb-evo-5-6-2-through-5-8-8-contains-an-authenticated-os"},{"cve":"CVE-2026-124012","cvss":8.1,"slug":"cve-2026-124012-xweb-evo-5-6-2-through-5-8-8-contains-a-hardcoded-credential","title":"Copeland XWEB EVO hardcoded credential authentication bypass","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:24.97+00:00","url":"https://junglewise.ai/threats/cve-2026-124012-xweb-evo-5-6-2-through-5-8-8-contains-a-hardcoded-credential"},{"cve":"CVE-2026-124007","cvss":8.1,"slug":"cve-2026-124007-xweb-evo-before-5-6-2-contains-a-pre-authentication-os-command","title":"Copeland XWEB EVO pre-authentication OS command injection","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.387+00:00","url":"https://junglewise.ai/threats/cve-2026-124007-xweb-evo-before-5-6-2-contains-a-pre-authentication-os-command"},{"cve":"CVE-2026-124006","cvss":8.1,"slug":"cve-2026-124006-xweb-evo-through-5-8-8-contains-a-predictable-credential","title":"Copeland XWEB EVO predictable credential generation","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:23.033+00:00","url":"https://junglewise.ai/threats/cve-2026-124006-xweb-evo-through-5-8-8-contains-a-predictable-credential"},{"cve":"CVE-2026-124005","cvss":8.1,"slug":"cve-2026-124005-xweb-evo-4-3-0-through-5-8-8-contains-a-weak-password-generation","title":"Copeland XWEB EVO weak password generation vulnerability","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:22.673+00:00","url":"https://junglewise.ai/threats/cve-2026-124005-xweb-evo-4-3-0-through-5-8-8-contains-a-weak-password-generation"},{"cve":"CVE-2026-124003","cvss":7.8,"slug":"cve-2026-124003-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability","title":"Copeland XWEB EVO command injection in Lua CGI interpreter","severity":"high","exploited":false,"published_at":"2026-11-12T20:18:21.917+00:00","url":"https://junglewise.ai/threats/cve-2026-124003-xweb-evo-before-5-6-2-contains-a-command-injection-vulnerability"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}