CVE-2026-78037
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.
Risk Assessment
Exploitation can lead to full device compromise, potentially allowing the attacker to access data or use the device for further attacks on the network.
Recommendation
Update the device firmware to the latest version if available and restrict access to the management interface to trusted administrators only.
Other vulnerabilities in Xiiaozet LK100W
Original NVD description (English source)
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.