CVE-2026-55729

Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.

Score

CVSS 4.0 7.7 High

Status

Deferred - vulnerability@ncsc.ch

Published

2026-07-24

Last modified

2026-10-24

Weaknesses

CWE-200

Affected products

• Lweb-802 (Loytec)

References

• https://www.loytec.com/support/product-security/advisories/8526-dibt-cve-20260601-0001-exposure-of-credentials-stored-i…