CVE-2026-78239 — Xiiaozet LK100W Missing Authentication for Critical Function
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be …
Published: 2026-08-27 · CVSS: 9.3 · CVSS 4.0
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7