CVE-2026-12496 | Loytec LIP-ME20xC up to 8.4.16 OPC XML-DA Server Statistics User-Agent cross site scripting

July 24, 2026 Yanac

A vulnerability was found in Loytec LIP-ME20xC, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD up to 8.4.16. It has been declared as problematic. Affected is an unknown function of the component OPC XML-DA Server Statistics. The manipulation of the argument User-Agent results in cross site scripting.

This vulnerability is known as CVE-2026-12496. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More