Skip to content
OpenAdvisories

Vendor

Loytec

9 known vulnerabilities.

Products

LIP-ME20xC 7 L-INX 7 L-GATE 7 L-ROC 7 L-IOB 7 L-DALI 7 L-VIS 7 L-PAD 7 LWEB-802 2 LIP-3ECTB 0 LINX-100 0 LVIS-3E100 0 LIP-ME201 0 LVIS-3ME 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2026-55732

    Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)

    Out-of-bounds Read (CWE-125) in BACnet packet parsing (`bacdt_datetime_to_tod`) in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.18 on LINX-A64 allows an unauthenticated remote attacker to crash `linx_a64.exe` and ultimat…

    Loytec LIP-ME20xC L-GATE L-IOB
  • High 8.7
    CVE-2026-55730

    Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802

    Reflected Cross-Site Scripting (CWE-79) in LWEB802 in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's browser and perform actions with the victim's privileges via a crafted …

    Loytec LWEB-802
  • High 7.7
    CVE-2026-55729

    Loytec LWEB802: Exposure of Sensitive Information in browser localStorage

    Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link.

    Loytec LWEB-802
  • High 8.4
    CVE-2026-12504

    Loytec LINX firmware: Improper Authentication in PAM configuration

    Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local attacker to authenticate as a uid=0 account without a password and obtain a root sh…

    Loytec L-IOB L-VIS L-INX
  • High 8.4
    CVE-2026-12502

    Loytec LINX firmware: Improper Privilege Management in /usr/bin/ltsudo

    Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to reset the password of any LARM user (including the `larm…

    Loytec L-VIS L-INX L-ROC
  • High 8.7
    CVE-2026-12496

    Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server

    Stored Cross-Site Scripting (CWE-79) in the OPC XML-DA server statistics in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to execute arbitrary JavaScript in an admi…

    Loytec L-IOB L-VIS L-INX