Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-78037

Xiiaozet LK100W OS Command Injection

Description

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xiiaozet Xiiaozet LK100W

Default version status: unaffected

  • 0 to < 2.1.240affected
  • 2.1.240unaffected

References