Filtered by vendor Xiiaozet Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-78239 1 Xiiaozet 1 Xiiaozet Lk100w 2026-08-28 9.8 Critical
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.
CVE-2026-78037 1 Xiiaozet 1 Xiiaozet Lk100w 2026-08-28 8.8 High
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.