CVE-2026-21718 - Vulnerability Analysis

Overview

Copeland XWEB Pro <= 1.12.1 contains an authentication bypass vulnerability caused by improper authentication checks, letting attackers bypass authentication and execute code pre-authentication.

Severity & Score

Impact

Attackers can bypass authentication and execute code without prior access, potentially compromising the entire system.

Mitigation

Update to the latest version beyond 1.12.1.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-057-10.json
• https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 27, 2026

🔴 CVE-2026-21718 - Critical (10) An authentication bypass vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, enabling any attackers to bypass the authentication requirement and achieve pre-authenticated code execution on the system. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21718/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner