Information disclosure in Loytec Lweb-802
CVE-2026-55729
Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.
Vulnerability class: Information Disclosure
Affected products
- Loytec Lweb-802 — versions 0
Weakness classification (CWE)
References
- vulnerability@ncsc.ch (vendor-advisory)