https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 15 Nov 2026 02:24:46 +0000 https://db.gcve.eu/vuln/cve-2026-124010 <p><strong>Affected:</strong> Copeland XWEB EVO</p> <p>XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands as root by exploiting the setuid-root CGI xwconsole.cgi. Attackers can supply malicious input through the sh parameter, which is passed unsanitized to popen(), to achieve full system compromise. This product line reached it&#39;s end of service date in March 2026.</p> <p><strong>Affected:</strong> Copeland XWEB EVO</p> <p>XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands as root by exploiting the setuid-root CGI xwconsole.cgi. Attackers can supply malicious input through the sh parameter, which is passed unsanitized to popen(), to achieve full system compromise. This product line reached it&#39;s end of service date in March 2026.</p> https://db.gcve.eu/vuln/cve-2026-124010