ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-21718
10критическая

CVE-2026-21718

Описание

An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system.

Затрагиваемое ПО
Copeland Xweb 300d pro firmwareCopeland Xweb 300d proCopeland Xweb 500d pro firmwareCopeland Xweb 500d proCopeland Xweb 500b pro firmwareCopeland Xweb 500b pro
CVSS
Балл10 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Источники
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.jsonhttps://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdatehttps://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10