Lantronix vulnerabilities
28 published CVEs name Lantronix among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 28
- Last 12 months
- 24
- Critical
- 13
- Known exploited
- 1
Critical 13High 12Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20253
- 202624
Known exploitedNewest addition to KEV first
- CVE-2025-67038
Lantronix EDS5000, G520, and X300 OS Command Injection
Lantronix · EDS5000 series
ExploitedCritical9.3
Newest CVEs
- CVE-2026-109439
Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718
LANTRONIX · XPress-DR
Critical9.3 - CVE-2026-91191
Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature
Lantronix · G520 Series
High7.7 - CVE-2026-84409
Lantronix G520 Series Cellular Gateway Cross-site Scripting
Lantronix · G520 Series
High7.7 - CVE-2026-80156
Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass
LANTRONIX · SLC8000
Critical9.4 - CVE-2026-80155
Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
LANTRONIX · SLC8000
Critical10.0 - CVE-2026-80154
Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass
LANTRONIX · SLC8000
High8.9 - CVE-2026-80152
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
LANTRONIX · SLC8000
Critical9.4 - CVE-2026-80151
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
LANTRONIX · SLC8000
Critical9.4 - CVE-2026-80150
Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter
LANTRONIX · SLC8000
High7.7 - CVE-2026-80149
Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter
LANTRONIX · SLC8000
High7.7