CVE-2026-78037 — Xiiaozet LK100W OS Command Injection
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system c…
Published: 2026-08-27 · CVSS: 8.7 · CVSS 4.0
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7