Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-78239

Xiiaozet LK100W Missing Authentication for Critical Function

Description

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xiiaozet Xiiaozet LK100W

Default version status: unaffected

  • 0 to < 2.1.240affected
  • 2.1.240unaffected

References