CVE-2026-124014

{
  "etk_id": "ETK-2026-4323",
  "cve_id": "CVE-2026-124014",
  "display_id": "CVE-2026-124014",
  "ghsa_id": "GHSA-x5q2-4j2q-cpfm",
  "euvd_id": "EUVD-2026-124673",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated configuration file write in Copeland XWEB EVO",
  "summary": "Copeland XWEB EVO 4.3.0 through 5.8.8 is affected by an unauthenticated configuration-write flaw. A remote attacker who can reach the exposed management function may change configuration settings or disrupt operation without logging in.",
  "mitigation": "Restrict management-network access to trusted administrators and block unauthenticated requests to the configuration handler at the network edge. Plan to retire or replace affected XWEB EVO deployments, because no fixed version is recorded.",
  "vendor": "Copeland",
  "product": "XWEB EVO",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 4.3.0, <= 5.8.8"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "XWEB EVO",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 13.026162533333334,
  "t0_at": "2026-11-12T20:05:59.683000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-12T23:46:11.213519+00:00",
      "days": 0.1529112328587963,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T20:05:59.683000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-11-12T00:00:00+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T20:05:59.683000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-124014"
    },
    "trigger_signal": {
      "at": "2026-11-12T20:05:59.683000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T20:05:59.683000+00:00",
      "url": "https://github.com/advisories/GHSA-x5q2-4j2q-cpfm"
    }
  }
}