CVE-2026-124010 | Copeland XWEB EVO up to 5.6.1 CGI xwconsole.cgi popen sh command injection

A vulnerability has been found in Copeland XWEB EVO up to 5.6.1 and classified as critical. The impacted element is the function popen of the file xwconsole.cgi of the component CGI. Performing a manipulation of the argument sh results in command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is cataloged as CVE-2026-124010. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More