CVE-2026-20910 Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the devices field of the firmware update action to achieve remote code execution...

CVE-2026-20742 Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into requests sent to the templates route...

CVE-2026-21389

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into the request body sent to the contacts import route...

CVE-2026-24663 Copeland XWEB and XWEB Pro OS Command Injection

An OS command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an unauthenticated attacker to achieve remote code execution on the system by sending a crafted request to the libraries installation route and injecting malicious input into the request body...

Copeland多款产品 操作系统命令注入漏洞

Copeland XWEB 300D PRO, among others, are advanced commercial and industrial refrigeration monitoring and management systems developed by the American company Copeland. Several Copeland products have vulnerabilities related to operating system command injection. These vulnerabilities stem from th...

Copeland XWEB PRO 操作系统命令注入漏洞

Copeland XWEB PRO is an advanced commercial and industrial refrigeration monitoring and management system developed by the American company Copeland. Versions of Copeland XWEB PRO prior to 1.12.1 contained a vulnerability related to operating system command injection. This vulnerability arises fr...

rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

Vulnerability of iOS and iPadOS operating systems, related to improper handling of exception states, allows attackers to gain unauthorized access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2026-22250

Name of the Vulnerable Software and Affected Versions XWEB Pro versions prior to 1.12.1 Description An operating system command injection issue exists that allows an authenticated attacker to execute code remotely. This is achieved by injecting malicious input into the map filename field during t...

PT-2026-22258

Name of the Vulnerable Software and Affected Versions XWEB Pro versions prior to 1.12.1 Description A flaw exists that allows a logged-in attacker to execute code remotely on a system. This is achieved by injecting harmful input into OpenSSL argument fields within requests sent to the utility...

Copeland XWEB PRO 操作系统命令注入漏洞

Copeland XWEB PRO is an advanced commercial and industrial refrigeration monitoring and management system developed by the American company Copeland. Versions of Copeland XWEB PRO prior to 1.12.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed...

Vulnerability of iOS and iPadOS operating systems, related to improper authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of iOS and iPadOS operating systems is related to improper authentication. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the ext4_resize_fs() function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizefs function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-22251

Name of the Vulnerable Software and Affected Versions XWEB Pro versions 1.12.1 and earlier Description A flaw exists that allows a logged-in attacker to execute code on a system remotely. This is achieved by injecting malicious input into the devices field within the firmware update action. The...

Copeland多款产品 操作系统命令注入漏洞

Copeland XWEB PRO, among others, are advanced commercial and industrial refrigeration monitoring and management systems developed by the American company Copeland. Several Copeland products have vulnerabilities related to OS command injection. This vulnerability stems from OS commands injected in...

openDCIM 操作系统命令注入漏洞

openDCIM is an open-source data center inventory management DCIM application. Version 23.04 of openDCIM contains a vulnerability related to operating system command injection. This vulnerability stems from the lack of validation or cleanup of user input in the reportnetworkmap.php file, which may...

PT-2026-22270

Name of the Vulnerable Software and Affected Versions XWEB Pro versions prior to 1.12.1 Description An OS command injection issue exists, allowing an authenticated attacker to execute code remotely. This is achieved by providing malicious input through the device hostname configuration during...

Vulnerability of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS, related to reading beyond the buffer of memory, allowing attackers to disclose protected information

The vulnerabilities of operating systems such as watchOS, tvOS, macOS, iOS, iPadOS, and visionOS involve reading data beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to disclose sensitive information by processing specially created images...

Vulnerability of operating systems such as watchOS, tvOS, macOS, iOS, and iPadOS, due to insecure temporary files, allows attackers to expose sensitive information.

Vulnerabilities of operating systems such as watchOS, tvOS, macOS, iOS, and iPadOS are related to insecure temporary files. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information...

CVE-2026-28269 Kiteworks Core has an OS Command Injection

Kiteworks is a private data network PDN. Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to redirect command output to arbitrary file locations. This could be exploited to overwrite critical system files and gain elevated access...