Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Xiiaozet Clear all filters
TI-2026-53749 CVE-2026-76943 · GHSA-6x82-vfrh-gxpc

Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Priority MEDIUM 50

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01043 Published 2026-08-27 Fixed in 2.1.240 CWE-288
TI-2026-54415 CVE-2026-78239 · GHSA-38f6-3gv7-32xr

Xiiaozet LK100W Missing Authentication for Critical Function

Priority MEDIUM 49

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00766 Published 2026-08-27 Fixed in 2.1.240 CWE-306
TI-2026-54286 CVE-2026-78037 · GHSA-frm2-vmcc-vghq

Xiiaozet LK100W OS Command Injection

Priority MEDIUM 43

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01868 Published 2026-08-27 Fixed in 2.1.240 CWE-78