The $63 Print Server With Two Unauthenticated 9.8s: Xiiaozet LK100W, CISA ICSA-26-239-01
A ~$63 Chinese wireless USB print server whose entire job is to sit on your LAN and share a dumb printer just got a CISA ICS advisory: three CVEs, two of them CVSS 9.8 with no authentication required. All fixed in firmware 2.1.240. If you own one, patch it and VLAN it.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.8CVE-2026-78239 +2
icsxiiaozetprint-server