Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Loytec LWEB-802 5.0.8 Clear all filters
TI-2026-40228 CVE-2026-55730 · GHSA-8c38-mwr2-hj5c

Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802

Priority MEDIUM 47

Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00606 Published 2026-07-24 Fixed in 5.0.8 CWE-116
TI-2026-40227 CVE-2026-55729 · GHSA-c4x3-39wp-wf7p

Loytec LWEB802: Exposure of Sensitive Information in browser localStorage

Priority LOW 36

Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00544 Published 2026-07-24 Fixed in 5.0.8 CWE-200