Lweb 802
Monthly
Reflected Cross-Site Scripting in Loytec LWEB-802 versions prior to 5.0.8 allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by enticing them to click a crafted link containing malicious project or mspParams parameters. No active exploitation has been observed in the wild and EPSS indicates a low probability of exploitation (0.36%). Vendor has released a fix in version 5.0.8.
We need to output a JSON object with the specified fields. The input provides: CVE-2026-55729, description, CVSS 4.0 vector, EPSS, patch availability, tags, SSVC, ENISA, affected versions, references. We must synthesize. First, product_name: "Loytec LWEB-802" (1-3 words). It's a specific product: "LWEB-802". So "Loytec LWEB-802" fits (3 words). Yes. summary: Plain-language for security pros. Original synthesis, not copying description. Start with impact verb. Description says exposure of sensitive information, leaking stored management credentials via crafted link, unauthenticated remote attacker. Affected before 5.0.8 on all platforms. So: "Credential disclosure in Loytec LWEB-802 prior to 5.0.8 allows unauthenticated remote attackers to steal browser-stored management credentials through a malicious link." Mention EPSS 0.32% (low), no KEV, POC status unknown (not mentioned, but "no public exploit identified" since no POC tag? Tags: Information Disclosure, Lweb 802. SSVC: exploitation none. So active exploitation none. So: "No active exploitation reported, and EPSS score is low (0.32%), but the exposure is high-impact." And state CVSS 4.0 base score 7.7 (High). Also mention patch available. So: "Patched in version 5.0.8, with no known in-the-wild exploitation." No KEV, so not actively exploited. So summary: "Credential theft from browser local storage in Loytec LWEB-802 prior to version 5.0.8 enables remote unauthenticated attackers to exfiltrate stored management credentials by tricking a user into clicking a crafted link. The vulnerability has a low EPSS probability (0.32%) and no reported exploitation, but the CVSS 4.0 base score of 7.7 reflects high confidentiality, integrity, and availability impact on the vulnerable system." Keep concise. Since CVSS 4.0 vector is given, I'll note impact high. Actually, CVSS 4.0 vector: VC:H/VI:H/VA:H. So high impact to confidentiality, integrity, availability on vulnerable component. That is the browser's local storage? The
Reflected Cross-Site Scripting in Loytec LWEB-802 versions prior to 5.0.8 allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by enticing them to click a crafted link containing malicious project or mspParams parameters. No active exploitation has been observed in the wild and EPSS indicates a low probability of exploitation (0.36%). Vendor has released a fix in version 5.0.8.
We need to output a JSON object with the specified fields. The input provides: CVE-2026-55729, description, CVSS 4.0 vector, EPSS, patch availability, tags, SSVC, ENISA, affected versions, references. We must synthesize. First, product_name: "Loytec LWEB-802" (1-3 words). It's a specific product: "LWEB-802". So "Loytec LWEB-802" fits (3 words). Yes. summary: Plain-language for security pros. Original synthesis, not copying description. Start with impact verb. Description says exposure of sensitive information, leaking stored management credentials via crafted link, unauthenticated remote attacker. Affected before 5.0.8 on all platforms. So: "Credential disclosure in Loytec LWEB-802 prior to 5.0.8 allows unauthenticated remote attackers to steal browser-stored management credentials through a malicious link." Mention EPSS 0.32% (low), no KEV, POC status unknown (not mentioned, but "no public exploit identified" since no POC tag? Tags: Information Disclosure, Lweb 802. SSVC: exploitation none. So active exploitation none. So: "No active exploitation reported, and EPSS score is low (0.32%), but the exposure is high-impact." And state CVSS 4.0 base score 7.7 (High). Also mention patch available. So: "Patched in version 5.0.8, with no known in-the-wild exploitation." No KEV, so not actively exploited. So summary: "Credential theft from browser local storage in Loytec LWEB-802 prior to version 5.0.8 enables remote unauthenticated attackers to exfiltrate stored management credentials by tricking a user into clicking a crafted link. The vulnerability has a low EPSS probability (0.32%) and no reported exploitation, but the CVSS 4.0 base score of 7.7 reflects high confidentiality, integrity, and availability impact on the vulnerable system." Keep concise. Since CVSS 4.0 vector is given, I'll note impact high. Actually, CVSS 4.0 vector: VC:H/VI:H/VA:H. So high impact to confidentiality, integrity, availability on vulnerable component. That is the browser's local storage? The