Vulnerability in Xiiaozet Lk100w

CVE-2026-76943

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to complete device compromise.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.010 (63.1th percentile), scored .

Low probability of exploitation in the next 30 days, but still tracked. 63rd percentile — 63.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-76943: held from 0.007 to 0.010.

EPSS over last 30 days · oldest: 0.007 · newest: 0.010 · change: +0.004

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-76943?
CVE-2026-76943 is a critical-severity vulnerability in Xiiaozet Lk100w, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 9.8/10. Published 2026-08-28.
How severe is CVE-2026-76943?
Critical severity. CVSS v3 base score is 9.8 out of 10.