Dashboard / CVE-2026-124006

CVE-2026-124006

CRITICAL
INFO Priority: 0.05 BB Relevance: 79/100
Published: 2026-11-12 Modified: 2026-11-13 First seen: 2026-11-12 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to derive the Linux root password by computing a fixed prefix combined with a daily password value. Attackers can calculate the deterministic root credential, which before 5.7.0 was identical across all units and from 5.7.0 onward remains derivable from the MAC-based daily password, to gain unauthorized root access to the underlying operating system. This product line reached it's end of service date in March 2026.

Weakness Classification (2)

Affected Software (5)

VendorProductVersion
Copeland XWEB EVO 0
Copeland XWEB EVO 0
Copeland XWEB EVO 0
Copeland XWEB EVO 0
Copeland XWEB EVO 0

References & Advisories (4)

Bug Bounty Relevance

79 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.55%
Raw Score 0.005530
Percentile 46.8%
Date 2026-11-13

Intelligence Sources

mitre ref →
nvd ref →

External Links