CVE-2026-124007 | Copeland XWEB EVO up to 5.6.1 Authentication login.lua hashpass password os command injection

A vulnerability marked as critical has been reported in Copeland XWEB EVO up to 5.6.1. Affected by this issue is the function hashpass of the file login.lua of the component Authentication. Performing a manipulation of the argument Password results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability was named CVE-2026-124007. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More