CVE-2026-55729:詳細資料

CVE-2026-55729

2026-07-24
15h18 +00:00
A01-Broken Access Control
2026-10-24
13h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

參考資料