Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-76943 EUVD-2026-67294GHSA-6x82-vfrh-gxpc

Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by icscert

Description

Xiiaozet LK100Wt contains an authentication weakness within an
administrative service that may allow an attacker to bypass intended
access controls and obtain command execution capabilities. Successful
exploitation could allow unauthorized interaction with privileged
functionality and may lead to complete device compromise.

Affected products

VendorProductAffectedFixed
Xiiaozet Xiiaozet LK100W < 2.1.240 2.1.240

Advisories 1

References