{"metadata": {"vulnerability": "CVE-2026-124002", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}, "linked_omitted": 0}, "data": [{"timestamp": "2026-10-19T16:39:00Z", "date_only": false, "value": "2026-10-19T16:39:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.timeline.0.time", "text": "VulnCheck CVD team reported to Copeland PSIRT"}, {"timestamp": "2026-10-19T17:11:00Z", "date_only": false, "value": "2026-10-19T17:11:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.timeline.1.time", "text": "Copeland PSIRT acknowledged receipt"}, {"timestamp": "2026-11-05T19:13:00Z", "date_only": false, "value": "2026-11-05T19:13:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.timeline.2.time", "text": "Copeland PSIRT follows up stating that given the EOS status, they will not be carrying out a comparative analysis against previously disclosed vulnerabilities"}, {"timestamp": "2026-11-06T18:38:38.543Z", "date_only": false, "value": "2026-11-06T18:38:38.543Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-124002", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T19:34:26.958Z", "date_only": false, "value": "2026-11-12T19:34:26.958Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-12T19:41:12.195Z", "date_only": false, "value": "2026-11-12T19:41:12.195412Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117605169341409088", "record": "CVE-2026-124002", "field": "creation_timestamp", "uuid": "9d4ef058-11fd-4daf-87d5-18f93037c074", "content": "CVE-2026-124002 Dixell/Copeland XWEB EVO Pre-Authentication OS Command Injection via Username XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by injecting shell metacharacters into the username field of login.lua, cleanout.lua, or api.lua before the password check occurs. Attackers can exploit this flaw combined with the setuid-root wlua interpreter to execute commands with root privileges, achieving full system compromise.\nhttps://www.cve.org/CVERecord?id=CVE-2026-124002https://webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdatehttps://www.vulncheck.com/advisories/dixell-copeland-xweb-evo-pre-authentication-os-command-injection-via-username#Copeland #XWEBEVO#CVE_2026_124002#bot", "url": "https://infosec.exchange/users/cve/statuses/117605169341409088"}, {"timestamp": "2026-11-12T19:55:42.192Z", "date_only": false, "value": "2026-11-12T19:55:42.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-124002", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-12T19:55:42.192Z", "date_only": false, "value": "2026-11-12T19:55:42.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T20:18:21Z", "date_only": false, "value": "2026-11-12T20:18:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6FGF-7RXH-228Q", "record": "GHSA-6FGF-7RXH-228Q", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-12T20:18:21.597Z", "date_only": false, "value": "2026-11-12T20:18:21.597", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-124002", "record": "FKIE_CVE-2026-124002", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T20:30:05.352Z", "date_only": false, "value": "2026-11-12T20:30:05.352671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n25cqlsxo32k", "record": "CVE-2026-124002", "field": "creation_timestamp", "uuid": "c11c516a-1aa9-4dc2-a671-9a21a9d85479", "content": "CVE-2026-124002 - xweb evo\nVersions 5.2.3 up to but not including 5.7.0 of Copeland XWEB EVO let anyone send specially crafted data in the username field before logging in. This can cause the system to run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xwebevo #copeland #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n25cqlsxo32k"}, {"timestamp": "2026-11-12T21:31:27Z", "date_only": false, "value": "2026-11-12T21:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6FGF-7RXH-228Q", "record": "GHSA-6FGF-7RXH-228Q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-12T21:31:27Z", "date_only": false, "value": "2026-11-12T21:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6FGF-7RXH-228Q", "record": "GHSA-6FGF-7RXH-228Q", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-12T21:36:06.743Z", "date_only": false, "value": "2026-11-12T21:36:06.743", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-124002", "record": "FKIE_CVE-2026-124002", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-12T22:07:33.772Z", "date_only": false, "value": "2026-11-12T22:07:33.772159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3n25i6wrwsz2k", "record": "CVE-2026-124002", "field": "creation_timestamp", "uuid": "1e60e2df-5765-4b31-8703-1fcb6008a5fa", "content": "\ud83d\udea8 CVE-2026-124002 \u2014 CVSS 9.3 CRITICAL\n\nXWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerabili...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-124002\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3n25i6wrwsz2k"}], "metrics": {"as_of": "2026-11-13T10:26:44.376Z", "anchors": {"origin": {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 124004.376702, "hours": 34.445660194999995, "days": 1.4352358414583333, "min_seconds": 37604.376702, "max_seconds": 124004.376702, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-124002", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T10:26:44.376Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}