Predictable root credential generation in XWEB EVO
XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to derive the Linux root password for unauthorized access.
CVE search metadata
CVE search record: CVE-2026-124006. Severity: high. CVSS: 8.1. KEV: no. Brief: Predictable root credential generation in XWEB EVO. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xweb-evo-credential-vulnerability-cve-2026-124006/
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 20:48 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability. Attackers can derive the Linux root password by calculating a value based on a fixed prefix and daily password, or by using a MAC-based calculation for devices from 5.7.0 onward. This allows unauthorized root access to the underlying operating system.
Impact
Successful exploitation results in unauthorized root access to the underlying operating system. This product line reached its end of service date in March 2026.
Recommendation
As this product line has reached end of service, users should be aware that no further updates are provided.