# cve.now: Copeland

The newest entries naming Copeland as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-3037](https://cve.now/CVE-2026-3037.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-20797](https://cve.now/CVE-2026-20797.md): Copeland XWEB and XWEB Pro Stack-based Buffer Overflow (CVSS 4.3)
- [CVE-2026-22877](https://cve.now/CVE-2026-22877.md): Copeland XWEB and XWEB Pro Path Traversal (CVSS 3.7)
- [CVE-2026-25037](https://cve.now/CVE-2026-25037.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25196](https://cve.now/CVE-2026-25196.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-20764](https://cve.now/CVE-2026-20764.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25721](https://cve.now/CVE-2026-25721.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-23702](https://cve.now/CVE-2026-23702.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-24452](https://cve.now/CVE-2026-24452.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25105](https://cve.now/CVE-2026-25105.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-24695](https://cve.now/CVE-2026-24695.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-20902](https://cve.now/CVE-2026-20902.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25109](https://cve.now/CVE-2026-25109.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-24689](https://cve.now/CVE-2026-24689.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-20910](https://cve.now/CVE-2026-20910.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25195](https://cve.now/CVE-2026-25195.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-24517](https://cve.now/CVE-2026-24517.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-20742](https://cve.now/CVE-2026-20742.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-25111](https://cve.now/CVE-2026-25111.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-21389](https://cve.now/CVE-2026-21389.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 8.0)
- [CVE-2026-24663](https://cve.now/CVE-2026-24663.md): Copeland XWEB and XWEB Pro OS Command Injection (CVSS 9.0)
- [CVE-2026-21718](https://cve.now/CVE-2026-21718.md): Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm (CVSS 10.0)
- [CVE-2026-25085](https://cve.now/CVE-2026-25085.md): Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value (CVSS 8.6)
- [CVE-2025-52551](https://cve.now/CVE-2025-52551.md): Proprietary protocol allows for unauthenticated file operations (CVSS 9.3)
- [CVE-2025-52550](https://cve.now/CVE-2025-52550.md): Firmware upgrade packages are unsigned (CVSS 8.6)
- [CVE-2025-52549](https://cve.now/CVE-2025-52549.md): Predictable root linux password generation (CVSS 9.2)
- [CVE-2025-52548](https://cve.now/CVE-2025-52548.md): Enabling SSH and Shellinabox on the vulnerable machine (CVSS 6.9)
- [CVE-2025-52547](https://cve.now/CVE-2025-52547.md): DoS to the application services (CVSS 8.7)
- [CVE-2025-52546](https://cve.now/CVE-2025-52546.md): Stored XSS by uploading a specially crafted floor plan file (CVSS 5.1)
- [CVE-2025-52545](https://cve.now/CVE-2025-52545.md): Privilege escalation in the application services (CVSS 7.7)
- [CVE-2025-52544](https://cve.now/CVE-2025-52544.md): Arbitrary read file from the filesystem (CVSS 8.8)
- [CVE-2025-52543](https://cve.now/CVE-2025-52543.md): Login to the application services using only the password hash (CVSS 5.3)
- [CVE-2025-6519](https://cve.now/CVE-2025-6519.md): Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services (CVSS 9.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/copeland
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.