CVE-2026-124015 | Copeland XWEB EVO up to 5.8.8 Update Password Action users.lua update_password improper authentication

November 12, 2026 Yanac

A vulnerability categorized as very critical has been discovered in Copeland XWEB EVO up to 5.8.8. Affected by this issue is the function update_password of the file users.lua of the component Update Password Action. Such manipulation leads to improper authentication. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2026-124015. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More