CyberRota
← Ana sayfaya dön

CVE-2026-55730

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-24T15:18:31.257 · Çekilme zamanı: 2026-07-25T06:06:30.785279+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-55730
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
Java

Orijinal NVD Açıklaması

Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with the victim's privileges via a crafted link containing a malicious `project` or `mspParams` parameter.