The CVE-2026-78037 vulnerability affects Xiiaozet LK100W, allowing authenticated attackers to execute arbitrary operating system commands with elevated privileges through its web-based management interface. The vulnerability is classified as OS command injection, and its CVSS score is 8.7, indicating a high severity. Organizations using Xiiaozet LK100W should prioritize patching to prevent potential unaut [truncated]
The CVE-2026-76943 vulnerability is a critical authentication weakness in the Xiiaozet LK100Wt device. This weakness may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with privileged functionality and potentially result in complete device compromise. Organizations using Xiiaozet LK100Wt, ICS-CE [truncated]