CVE-2026-124013 | Copeland XWEB EVO up to 5.8.8 Import Preconfiguration api.lua io.popen server_url os command injection

A vulnerability, which was classified as critical, has been found in Copeland XWEB EVO up to 5.8.8. This affects the function io.popen of the file api.lua of the component Import Preconfiguration. Performing a manipulation of the argument server_url results in os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2026-124013. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More