CVE-2026-25085
High · 8.6CVSS
8.6
EPSS
0.8%
Published
Feb 27, 2026
CISA due date
—
The record
A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-73064 In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an… CWE-394
- CVE-2026-76956 In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code… CWE-394
- CVE-2025-23013 In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. CWE-394
- CVE-2024-1713 A user who can create objects in a database with plv8 3.2.1 installed is able to cause… CWE-394