CVE-2026-55730 — Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802

CVE-2026-55730

Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802 PUBLISHED

Description (CNA)

Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with the victim's privileges via a crafted link containing a malicious `project` or `mspParams` parameter.

Affected (CNA)

Vendor / product	Versions
Loytec / LWEB-802	affected 0 before 5.0.8

CWE

CWE-79, CWE-116

References

https://www.loytec.com/support/product-security/advisories/8527-dibt-cve-20260601-0002-reflected-cross-site-scripting-xss-high

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.