CVE-2026-25195 – Copeland XWEB and XWEB Pro OS Command Injection

CVE ID : CVE-2026-25195

Published : Feb. 27, 2026, 12:45 a.m. | 26 minutes ago

Description : An OS command injection

vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an
authenticated attacker to achieve remote code execution on the system by
supplying a crafted firmware update file via the firmware update route.

Severity: 8.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…