[ Vendor · 4 CVEs ]
Lantronix
CVEs affecting Lantronix published in the last 30 days, plus any Lantronix CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109439 | 14 Oct 2026 | CVSS 9.8 | LANTRONIX XPress-DRLantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote… | |
| CVE-2026-91191 | 29 Sep 2026 | CVSS 7.5 | Lantronix G520 SeriesThe device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the… | |
| CVE-2026-84409 | 29 Sep 2026 | CVSS 7.5 | Lantronix G520 SeriesThe device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for… | |
| CVE-2025-67038 | 11 Mar 2026 | CVSS 9.8 | Lantronix EDS5000 Code InjectionAn issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails… | Exploited |