What is the CVSS score of CVE-2026-25085?

CVE-2026-25085 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Xweb 500d Pro Firmware are affected by CVE-2026-25085?

Copeland XWEB Pro versions 1.12.1 and earlier contain an authentication bypass vulnerability that could allow unauthorized users to gain system access without valid credentials.

How to fix or mitigate CVE-2026-25085?

Within 24 hours: Inventory all Copeland XWEB Pro installations and document versions; begin monitoring for suspicious authentication attempts. Within 7 days: Contact Copeland for patch availability and workaround guidance; implement network access controls restricting XWEB Pro access to trusted networks only. Within 30 days: Deploy any available patches immediately upon release; conduct access log review for unauthorized login indicators; consider disabling remote access if not operationally critical.

Xweb 500d Pro Firmware CVE-2026-25085

HIGH

Unexpected Status Code or Return Value (CWE-394)

2026-02-27 ics-cert@hq.dhs.gov

Authentication Bypass Xweb 500d Pro Firmware Xweb 300d Pro Firmware Xweb 500b Pro Firmware

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 27, 2026 - 01:16 nvd

HIGH 8.6

DescriptionCVE.org

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.

AnalysisAI

Copeland XWEB Pro firmware versions 1.12.1 and earlier suffer from an authentication bypass vulnerability where malformed authentication responses are incorrectly validated as legitimate, allowing unauthenticated remote attackers to gain unauthorized access. The flaw affects multiple XWEB Pro models (500d, 300d, and 500b) with a CVSS score of 8.6 indicating high severity, though no patch is currently available. An attacker exploiting this vulnerability could bypass security controls and potentially access sensitive device functionality without valid credentials.

Technical ContextAI

Affects Xweb 500B Pro Firmware. A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.