CVE-2026-124003 | Copeland XWEB EVO up to 5.6.1 Lua CGI Interpreter /usr/bin/lua system argv command injection

A vulnerability classified as critical was found in Copeland XWEB EVO up to 5.6.1. This issue affects the function system of the file /usr/bin/lua of the component Lua CGI Interpreter. The manipulation of the argument argv results in command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2026-124003. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More