Product by Copeland
Xweb Evo
14 known vulnerabilities in Xweb Evo (Copeland), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-124010 | Dixell/Copeland XWEB EVO Unauthenticated Command Injection via xwconsole.cgi | 9.8 | |
| Critical | CVE-2026-124004 | Dixell/Copeland XWEB EVO Hardcoded Administrator Backdoor Password | 9.8 | |
| Critical | CVE-2026-124002 | Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Username | 9.8 | |
| Critical | CVE-2026-124007 | Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password Field | 8.1 | |
| Critical | CVE-2026-124012 | Dixell/Copeland XWEB EVO Hardcoded Administrator Daily Password Authentication Bypass | 8.1 | |
| Critical | CVE-2026-124006 | Dixell/Copeland XWEB EVO Predictable Root Password Generation | 8.1 | |
| Critical | CVE-2026-124005 | Dixell/Copeland XWEB EVO Predictable Administrator Password Generation | 8.1 | |
| Critical | CVE-2026-124014 | Dixell/Copeland XWEB EVO Unauthenticated Configuration Write via config.lua | 9.1 | |
| High | CVE-2026-124013 | Dixell/Copeland XWEB EVO OS Command Injection via api.lua | 8.8 | |
| High | CVE-2026-124009 | Dixell/Copeland XWEB EVO OS Command Injection via backup.lua | 7.2 | |
| High | CVE-2026-124008 | Dixell/Copeland XWEB EVO OS Command Injection via devices.lua | 7.2 | |
| High | CVE-2026-124003 | Dixell/Copeland XWEB Setuid Lua CGI Root Command Injection | 7.8 | |
| High | CVE-2026-124015 | Dixell/Copeland XWEB EVO Authentication Bypass via users.lua | 5.9 | |
| Medium | CVE-2026-124011 | Dixell/Copeland XWEB EVO Information Disclosure via sysinfo.lua | 5.3 |