LWEB-802 vulnerabilities

2 known vulnerabilities in LWEB-802 from Loytec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  LWEB-802: Improper Neutralization of Input During Web Page Generation

  CVE-2026-55730Jul 24, 2026Loytec

  Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with the victim's privileges via a crafted l

• 7.7 High severity

  LWEB-802: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-55729Jul 24, 2026Loytec

  Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.