Lantronix vulnerabilities
28 CVEs and advisories name Lantronix as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109439Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718
- CVE-2026-91191Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature
- CVE-2026-84409Lantronix G520 Series Cellular Gateway Cross-site Scripting
- CVE-2026-80156Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass
- CVE-2026-80155Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
- CVE-2026-80154Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass
- CVE-2026-80152Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
- CVE-2026-80151Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
- CVE-2026-80150Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter
- CVE-2026-80149Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter
- CVE-2026-80148Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation
- CVE-2026-80147Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write
- CVE-2026-80146Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read
- CVE-2026-80145Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
- CVE-2026-80144Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
- CVE-2026-80143Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
- CVE-2025-70082Lantronix EDS3000PS Unverified Password Change
- CVE-2025-67041Lantronix EDS3000PS OS Command Injection
- CVE-2025-67039Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel
- CVE-2025-67038Lantronix EDS5000, G520, and X300 OS Command Injection
- CVE-2025-67037Lantronix EDS5000, G520, and X300 OS Command Injection
- CVE-2025-67036Lantronix EDS5000, G520, and X300 OS Command Injection
- CVE-2025-67035Lantronix EDS5000 OS Command Injection
- CVE-2025-67034Lantronix EDS5000, G520, and X300 OS Command Injection
- CVE-2025-7766Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference
- CVE-2025-4338Lantronix Device Installer Improper Restriction of XML External Entity Reference
- CVE-2025-2567Lantronix Xport Missing Authentication for Critical Function
- CVE-2023-7237Lantronix XPort Weak Encoding for Password