CVE-2026-21718CWE-327

Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm

Critical · published February 27, 2026

CVSS v3.1
10.0
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability exists in Copeland XWEB Pro

version 1.12.1 and prior, enabling any attackers to bypass the

authentication requirement and achieve pre-authenticated code execution

on the system.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2026-02-27T00:34Z
EPSS history
Timeline
  • 27 FEB 00:34Z
    Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm
    cvelistv5