# cve.now: Lantronix

The newest entries naming Lantronix as an affected vendor (up to 200), of 28 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-109439](https://cve.now/CVE-2026-109439.md): Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 (CVSS 9.3)
- [CVE-2026-91191](https://cve.now/CVE-2026-91191.md): Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature (CVSS 7.5)
- [CVE-2026-84409](https://cve.now/CVE-2026-84409.md): Lantronix G520 Series Cellular Gateway Cross-site Scripting (CVSS 7.5)
- [CVE-2026-80156](https://cve.now/CVE-2026-80156.md): Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass (CVSS 9.4)
- [CVE-2026-80155](https://cve.now/CVE-2026-80155.md): Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation (CVSS 10.0)
- [CVE-2026-80154](https://cve.now/CVE-2026-80154.md): Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass (CVSS 8.9)
- [CVE-2026-80152](https://cve.now/CVE-2026-80152.md): Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule (CVSS 9.4)
- [CVE-2026-80151](https://cve.now/CVE-2026-80151.md): Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download (CVSS 9.4)
- [CVE-2026-80150](https://cve.now/CVE-2026-80150.md): Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter (CVSS 7.7)
- [CVE-2026-80149](https://cve.now/CVE-2026-80149.md): Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter (CVSS 7.7)
- [CVE-2026-80148](https://cve.now/CVE-2026-80148.md): Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation (CVSS 7.7)
- [CVE-2026-80147](https://cve.now/CVE-2026-80147.md): Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write (CVSS 9.4)
- [CVE-2026-80146](https://cve.now/CVE-2026-80146.md): Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read (CVSS 9.4)
- [CVE-2026-80145](https://cve.now/CVE-2026-80145.md): Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password (CVSS 9.4)
- [CVE-2026-80144](https://cve.now/CVE-2026-80144.md): Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write (CVSS 9.4)
- [CVE-2026-80143](https://cve.now/CVE-2026-80143.md): Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read (CVSS 9.4)
- [CVE-2025-70082](https://cve.now/CVE-2025-70082.md): Lantronix EDS3000PS Unverified Password Change (CVSS 2.7)
- [CVE-2025-67041](https://cve.now/CVE-2025-67041.md): Lantronix EDS3000PS OS Command Injection (CVSS 7.2)
- [CVE-2025-67039](https://cve.now/CVE-2025-67039.md): Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel (CVSS 9.8)
- [CVE-2025-67038](https://cve.now/CVE-2025-67038.md): Lantronix EDS5000, G520, and X300 OS Command Injection (CVSS 9.8, KEV)
- [CVE-2025-67037](https://cve.now/CVE-2025-67037.md): Lantronix EDS5000, G520, and X300 OS Command Injection (CVSS 7.2)
- [CVE-2025-67036](https://cve.now/CVE-2025-67036.md): Lantronix EDS5000, G520, and X300 OS Command Injection (CVSS 7.2)
- [CVE-2025-67035](https://cve.now/CVE-2025-67035.md): Lantronix EDS5000 OS Command Injection (CVSS 7.2)
- [CVE-2025-67034](https://cve.now/CVE-2025-67034.md): Lantronix EDS5000, G520, and X300 OS Command Injection (CVSS 7.2)
- [CVE-2025-7766](https://cve.now/CVE-2025-7766.md): Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference (CVSS 8.6)
- [CVE-2025-4338](https://cve.now/CVE-2025-4338.md): Lantronix Device Installer Improper Restriction of XML External Entity Reference (CVSS 6.9)
- [CVE-2025-2567](https://cve.now/CVE-2025-2567.md): Lantronix Xport Missing Authentication for Critical Function (CVSS 9.8)
- [CVE-2023-7237](https://cve.now/CVE-2023-7237.md): Lantronix XPort Weak Encoding for Password (CVSS 5.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/lantronix
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.