CVE-2026-78037

Xiiaozet LK100W is vulnerable to OS command injection through its 
web-based management interface. An authenticated attacker may be able to
 execute arbitrary operating system commands with elevated privileges, 
potentially resulting in unauthorized access to sensitive information or
 complete device compromise.