Threadlinqs IntelligenceStart free

VulnerabilityCVE-2026-21718

CVE-2026-21718

As of 2026-10-15, CVE-2026-21718 is a vulnerability. Threadlinqs Intelligence links 2 tracked threat campaigns to CVE-2026-21718, most recently “CVE-2026-22877: Copeland XWEB / XWEB Pro Unauthenticated Arbitrary File Read (Path Traversal)”.

CVSS
—Not yet scored
EPSS
—No EPSS score yet
CISA KEV
NoNot in the KEV catalog
Tracked threats
2Campaigns referencing it

Last updated:

What is CVE-2026-21718?

CVE-2026-21718 vulnerability details.

No weakness class, CVSS vector or affected-product list has been recorded for CVE-2026-21718 beyond the description above.

Severity and exploitation probability

CISA KEV
Not listed in the CISA Known Exploited Vulnerabilities catalog

Is CVE-2026-21718 being exploited?

It currently carries a trending score of 10 in the Threadlinqs vulnerability feed.

Affected products and versions

No affected-product or package list has been recorded for CVE-2026-21718 in the tracked sources. The vendor advisory and the references below are the authoritative statement of what is affected.

How to fix CVE-2026-21718

No vendor patch reference has been recorded for CVE-2026-21718 in the tracked sources. Watch the CNA record and the vendor advisory channel for a fix, and treat any affected deployment as exposed until the vendor states otherwise.

Threat activity tracking CVE-2026-21718

2 tracked threats in the Threadlinqs corpus reference CVE-2026-21718, either in the campaign’s CVE list or as an indicator on the campaign record.

Sources

Seeded from threat-derived and not yet processed by the Threadlinqs enrichment pipeline, so blank CVSS, EPSS or KEV fields above mean NOT MEASURED rather than measured-absent.

No external references are recorded on this row.