Critical severity9.8NVD Advisory· Published Aug 28, 2026· Updated Aug 31, 2026
CVE-2026-78239
CVE-2026-78239
Description
Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2News mentions
2- Cisagov CSAF: Seven Vulnerabilities Disclosed Together Impact Xiiaozet and Ebyte DevicesVypr Intelligence · Aug 28, 2026
- Xiiaozet LK100WCISA ICS Advisories