CVE-2026-76943CWE-288

CVE-2026-76943

Critical · published August 28, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

Xiiaozet LK100Wt contains an authentication weakness within an

administrative service that may allow an attacker to bypass intended

access controls and obtain command execution capabilities. Successful

exploitation could allow unauthorized interaction with privileged

functionality and may lead to complete device compromise.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01043 · 63.8th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-08-28T04:18Z
References (2)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-01.json · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 · [email protected]
EPSS history
Timeline
  • 27 AUG 21:50Z
    Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
    cvelistv5