Loytec Lweb-802 vulnerabilities

2 CVEs affecting Loytec Lweb-802, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-55730, published 2026-07-24.

More from Loytec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-55730, published 2026-07-24. High severity, CVSS 8.7. EPSS: 0.6% chance of exploitation in the next 30 days. Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and…
• CVE-2026-55729, published 2026-07-24. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management…