Will Xiiaozet LK100W devices be actively exploited via CVE-2026-78037/78239/76943 by Sept 2026?
[Auto-closed — deadline passed with no qualifying event] Deadline of 2026-09-30 has passed (today is 2026-10-02). No public documentation from CISA KEV, vendor advisories, or security researchers confirming active exploitation (PoC, malware samples, or victim reports) of CVE-2026-78037, CVE-2026-78239, or CVE-2026-76943 in Xiiaozet LK100W devices was found in the provided intelligence.
Evidence: https://threatodds.com/markets/f97de30d-c142-4555-8b37-4474aad9f8c6Market Overview
AI GENERATEDCISA has alerted to three critical vulnerabilities (CVSS 9.8) in Xiiaozet LK100W versions <2.1.240 allowing attacker takeover. No open market covers exploitation of this specific device firmware vulnerability.
Primary SourceResolution Criteria
Public documentation from CISA KEV, vendor advisories, or security researchers confirming active exploitation (PoC, malware samples, or victim reports) of any of the three CVEs in Xiiaozet LK100W before Sept 30, 2026.