CVE-2026-78037

Name of the Vulnerable Software and Affected Versions Xiiaozet LK100W (affected versions not specified)

Description The web-based management interface allows an authenticated attacker to perform OS command injection. This occurs when the system fails to properly sanitize input, allowing the execution of arbitrary operating system commands with elevated privileges. This could lead to unauthorized access to sensitive information or complete compromise of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.