CVE-2026-124012 | Copeland XWEB EVO up to 5.8.8 Authentication lualib_users.lua Users.authenticate hard-coded credentials

A vulnerability labeled as very critical has been found in Copeland XWEB EVO up to 5.8.8. The affected element is the function Users.authenticate of the file lualib_users.lua of the component Authentication. The manipulation results in hard-coded credentials. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is known as CVE-2026-124012. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More