CVE Catalog
CVE-2026-78239
CriticalCVSS 9.8Summary
The Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.
Risk Assessment
An attacker can gain unauthorized access to administrative functions of the device, potentially leading to full device compromise.
Recommendation
Restrict network access to the device and enforce authentication for all management functions.
Original NVD description (English source)
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.