CVE-2026-55729CWE-200

Loytec LWEB802: Exposure of Sensitive Information in browser localStorage

High · published July 24, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00544 · 44.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-07-24T13:59Z
EPSS history
Timeline
  • 24 JUL 13:59Z
    Loytec LWEB802: Exposure of Sensitive Information in browser localStorage
    cvelistv5