As cited
Copy frozen at (site build).
vulnerabilities
Xiiaozet LK100W
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Xiiaozet LK100W
Xiiaozet LK100W versions before 2.1.240 contain three critical vulnerabilities: CVE-2026-78037 (OS command injection via the web management interface), CVE-2026-78239 (missing authentication for critical management functions), and CVE-2026-76943 (authentication bypass in an administrative service). Successful exploitation could permit attackers to take control of affected devices. Xiiaozet recommends immediate updates to version 2.1.240, and CISA advises restricting network exposure and deploying these devices behind firewalls.
Why it matters: Organizations operating Xiiaozet LK100W devices in critical infrastructure environments worldwide must patch to v2.1.240 urgently, as these CVSS 9.3-9.8 vulnerabilities enable unauthenticated remote device compromise.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Xiiaozet LK100W
Xiiaozet LK100W versions before 2.1.240 contain three critical vulnerabilities: CVE-2026-78037 (OS command injection via the web management interface), CVE-2026-78239 (missing authentication for critical management functions), and CVE-2026-76943 (authentication bypass in an administrative service). Successful exploitation could permit attackers to take control of affected devices. Xiiaozet recommends immediate updates to version 2.1.240, and CISA advises restricting network exposure and deploying these devices behind firewalls.
Why it matters: Organizations operating Xiiaozet LK100W devices in critical infrastructure environments worldwide must patch to v2.1.240 urgently, as these CVSS 9.3-9.8 vulnerabilities enable unauthenticated remote device compromise.
- Source published
- First seen by Cybersecurity Tracker