CO
Vendor
Copeland
147
CVEs
0
On KEV
0
New 30D
Products
CX9.8
Copeland XWEB 300D PRO
Copeland
23 CVEs0 on KEV0 new
CX9.8
Copeland XWEB 500B PRO
Copeland
23 CVEs0 on KEV0 new
CX9.8
Copeland XWEB 500D PRO
Copeland
23 CVEs0 on KEV0 new
X39.8
Xweb 300d Pro Firmware
Copeland
23 CVEs0 on KEV0 new
X59.8
Xweb 500b Pro Firmware
Copeland
23 CVEs0 on KEV0 new
X59.8
Xweb 500d Pro Firmware
Copeland
23 CVEs0 on KEV0 new
ES9.8
E3 Supervisory Controller Firmware
Copeland
9 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-3037 | CX Copeland XWEB 500D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-20797 | CX Copeland XWEB 500B PRO Copeland | 9.8 | Feb 27 | Copeland XWEB and XWEB Pro Stack-based Buffer Overflow |
| CVE-2026-22877 | CX Copeland XWEB 500B PRO Copeland | 9.1 | Feb 27 | Copeland XWEB and XWEB Pro Path Traversal |
| CVE-2026-25037 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25196 | CX Copeland XWEB 500D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-20764 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25721 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-23702 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-24452 | CX Copeland XWEB 500B PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25105 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-24695 | CX Copeland XWEB 500B PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-20902 | CX Copeland XWEB 500B PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25109 | CX Copeland XWEB 500D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-24689 | CX Copeland XWEB 500B PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-20910 | CX Copeland XWEB 500B PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25195 | CX Copeland XWEB 500B PRO Copeland | 6.6 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-24517 | CX Copeland XWEB 500B PRO Copeland | 7.2 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-20742 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-25111 | CX Copeland XWEB 500D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-21389 | CX Copeland XWEB 300D PRO Copeland | 8.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-24663 | CX Copeland XWEB 300D PRO Copeland | 9.8 | Feb 27 | Copeland XWEB and XWEB Pro OS Command Injection |
| CVE-2026-21718 | CX Copeland XWEB 500B PRO Copeland | 9.8 | Feb 27 | Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm |
| CVE-2026-25085 | CX Copeland XWEB 500D PRO Copeland | 9.8 | Feb 27 | Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value |
| CVE-2025-52550 | ES E3 Supervisory Controller Firmware Copeland | 7.2 | Sep 2 | Firmware upgrade packages are unsigned |
| CVE-2025-52549 | ES E3 Supervisory Controller Firmware Copeland | 9.8 | Sep 2 | Predictable root linux password generation |
| CVE-2025-52548 | ES E3 Supervisory Controller Firmware Copeland | 4.9 | Sep 2 | Enabling SSH and Shellinabox on the vulnerable machine |
| CVE-2025-52547 | ES E3 Supervisory Controller Firmware Copeland | 7.5 | Sep 2 | DoS to the application services |
| CVE-2025-52546 | ES E3 Supervisory Controller Firmware Copeland | 6.1 | Sep 2 | Stored XSS by uploading a specially crafted floor plan file |
| CVE-2025-52545 | ES E3 Supervisory Controller Firmware Copeland | 7.5 | Sep 2 | Privilege escalation in the application services |
| CVE-2025-52544 | ES E3 Supervisory Controller Firmware Copeland | 7.5 | Sep 2 | Arbitrary read file from the filesystem |
| CVE-2025-52543 | ES E3 Supervisory Controller Firmware Copeland | 7.5 | Sep 2 | Login to the application services using only the password hash |
| CVE-2025-6519 | ES E3 Supervisory Controller Firmware Copeland | 9.8 | Sep 2 | Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services |