Copeland records
32 published records for vendor copeland.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 28.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')19
- CWE-522 Insufficiently Protected Credentials3
- CWE-20 Improper Input Validation2
- CWE-347 Improper Verification of Cryptographic Signature1
- CWE-394 Unexpected Status Code or Return Value1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
32 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-24663No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 500b pro firmware · CWE-78 | Critical9.8 | — | 2.2% | Feb 26, 2026 |
39Monitor | CVE-2026-20797No exploit | Copeland XWEB and XWEB Pro Stack-based Buffer Overflowcopeland · xweb 300d pro firmware · CWE-787 | Critical9.8 | — | 0.7% | Feb 26, 2026 |
39Monitor | CVE-2026-25085No exploit | Copeland XWEB and XWEB Pro Unexpected Status Code or Return Valuecopeland · xweb 500b pro firmware · CWE-394 | Critical9.8 | — | 0.5% | Feb 26, 2026 |
39Monitor | CVE-2026-21718No exploit | Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithmcopeland · xweb 300d pro firmware · CWE-327 | Critical9.8 | — | 0.4% | Feb 26, 2026 |
37Monitor | CVE-2025-6519No exploit | Consistent predictable generation of the password for the default admin user "ONEDAY" to the application servicescopeland · e3 supervisory controller firmware · CWE-522 | Critical9.3 | — | 0.5% | Sep 2, 2025 |
36Monitor | CVE-2026-3037No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 2.6% | Feb 26, 2026 |
36Monitor | CVE-2026-25721No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 2.6% | Feb 26, 2026 |
36Monitor | CVE-2026-20764No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 2.0% | Feb 26, 2026 |
36Monitor | CVE-2026-23702No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.9% | Feb 26, 2026 |
36Monitor | CVE-2026-25196No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.9% | Feb 26, 2026 |
36Monitor | CVE-2026-25105No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.9% | Feb 26, 2026 |
36Monitor | CVE-2026-25037No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.9% | Feb 26, 2026 |
36Monitor | CVE-2026-24452No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.9% | Feb 26, 2026 |
36Monitor | CVE-2026-22877No exploit | Copeland XWEB and XWEB Pro Path Traversalcopeland · xweb 300d pro firmware · CWE-22 | Critical9.1 | — | 0.5% | Feb 26, 2026 |
36Monitor | CVE-2025-52549No exploit | Predictable root linux password generationcopeland · e3 supervisory controller firmware · CWE-522 | Critical9.2 | — | 0.4% | Sep 2, 2025 |
35Monitor | CVE-2026-25109No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 500b pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-24689No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 500b pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-24695No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 500b pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-25111No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 500b pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-21389No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-20910No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-20902No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2026-20742No exploit | Copeland XWEB and XWEB Pro OS Command Injectioncopeland · xweb 300d pro firmware · CWE-78 | High8.8 | — | 1.5% | Feb 26, 2026 |
35Monitor | CVE-2025-52544No exploit | Arbitrary read file from the filesystemcopeland · e3 supervisory controller firmware · CWE-20 | High8.8 | — | 0.3% | Sep 2, 2025 |
34Monitor | CVE-2025-52547No exploit | DoS to the application servicescopeland · e3 supervisory controller firmware · CWE-20 | High8.7 | — | 0.3% | Sep 2, 2025 |
- CVE-2026-2466340Plan
Copeland XWEB and XWEB Pro OS Command Injection
CriticalCVSS 9.8No exploitEPSS 2%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2079739Monitor
Copeland XWEB and XWEB Pro Stack-based Buffer Overflow
CriticalCVSS 9.8No exploitEPSS 0%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2508539Monitor
Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value
CriticalCVSS 9.8No exploitEPSS 0%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2171839Monitor
Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm
CriticalCVSS 9.8No exploitEPSS 0%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2025-651937Monitor
Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services
CriticalCVSS 9.3No exploitEPSS 0%copeland · e3 supervisory controller firmwareSep 2, 2025
- CVE-2026-303736Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 2%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2572136Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 2%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2076436Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 2%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2370236Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2519636Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2510536Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2503736Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2445236Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2287736Monitor
Copeland XWEB and XWEB Pro Path Traversal
CriticalCVSS 9.1No exploitEPSS 0%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2025-5254936Monitor
Predictable root linux password generation
CriticalCVSS 9.2No exploitEPSS 0%copeland · e3 supervisory controller firmwareSep 2, 2025
- CVE-2026-2510935Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2468935Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2469535Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2511135Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 500b pro firmwareFeb 26, 2026
- CVE-2026-2138935Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2091035Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2090235Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2026-2074235Monitor
Copeland XWEB and XWEB Pro OS Command Injection
HighCVSS 8.8No exploitEPSS 1%copeland · xweb 300d pro firmwareFeb 26, 2026
- CVE-2025-5254435Monitor
Arbitrary read file from the filesystem
HighCVSS 8.8No exploitEPSS 0%copeland · e3 supervisory controller firmwareSep 2, 2025
- CVE-2025-5254734Monitor
DoS to the application services
HighCVSS 8.7No exploitEPSS 0%copeland · e3 supervisory controller firmwareSep 2, 2025