CVE-2026-55729

UNKNOWN 0.0

Loytec LWEB802: Exposure of Sensitive Information in browser localStorage

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.

CWE	CWE-200
Vendor	loytec
Product	lweb-802
Published	Jul 24, 2026
Last Updated	Jul 24, 2026

Stay Ahead of the Next One

Get instant alerts for loytec lweb-802

Be the first to know when new unknown vulnerabilities affecting loytec lweb-802 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Loytec / LWEB-802

0 < 5.0.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

loytec.com: https://www.loytec.com/support/product-security/advisories/8526-dibt-cve-20260601-0001-exposure-of-credentials-stored-in-browser-local-storage-high

Credits

Daniel Hulliger, armasuisse CYD Campus Damian Pfammatter, armasuisse CYD Campus