https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 02:06:21 +0000 https://db.gcve.eu/vuln/cve-2026-124011 <p><strong>Affected:</strong> Copeland XWEB EVO</p> <p>XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the device&#39;s eth0 MAC address and system clock by accessing sysinfo.lua, which also feeds the pre-login page. Attackers can use the disclosed MAC address and system clock values to offline derive the MAC-based daily password, enabling unauthorized authentication to the device. This product line reached it&#39;s end of service date in March 2026.</p> <p><strong>Affected:</strong> Copeland XWEB EVO</p> <p>XWEB EVO 5.6.2 through 5.8.8 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the device&#39;s eth0 MAC address and system clock by accessing sysinfo.lua, which also feeds the pre-login page. Attackers can use the disclosed MAC address and system clock values to offline derive the MAC-based daily password, enabling unauthorized authentication to the device. This product line reached it&#39;s end of service date in March 2026.</p> https://db.gcve.eu/vuln/cve-2026-124011