CVE-2026-76943: critical vulnerability in Xiiaozet LK100W
Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 1.0%
Xiiaozet LK100Wt contains an authentication weakness within an
administrative service that may allow an attacker to bypass intended
access controls and obtain command execution capabilities. Successful
exploitation could allow unauthorized interaction with privileged
functionality and may lead to complete device compromise.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Xiiaozet · Xiiaozet LK100WRelated CVEs — Xiiaozet LK100W
In the same product, most dangerous first.