By year
05
07
09
14
16
18
19
20
21
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited Lantronix flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2025-67038 Lantronix EDS5000 Code InjectionExploited since Jun 23, 2026 · CVSS 9.3
Latest high and critical flaws
- CVE-2026-109439 Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to readCritical 9.3 · Oct 14, 2026
- CVE-2026-91191 The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic.High 7.7 · Sep 29, 2026
- CVE-2026-84409 The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use.High 7.7 · Sep 29, 2026
- CVE-2026-80156 Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCxCritical 9.4 · Sep 22, 2026
- CVE-2026-80155 Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCxCritical 10 · Sep 22, 2026
- CVE-2026-80154 All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web maHigh 8.9 · Sep 22, 2026
- CVE-2026-80152 Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCxCritical 9.4 · Sep 22, 2026
- CVE-2026-80151 Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCxCritical 9.4 · Sep 22, 2026
- CVE-2026-80150 Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contHigh 7.7 · Sep 22, 2026
- CVE-2026-80149 Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contHigh 7.7 · Sep 22, 2026
- CVE-2026-80148 Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contHigh 7.7 · Sep 22, 2026
- CVE-2026-80147 Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stacCritical 9.4 · Sep 22, 2026
- CVE-2026-80146 Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stacCritical 9.4 · Sep 22, 2026
- CVE-2026-80145 Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a commCritical 9.4 · Sep 22, 2026
- CVE-2026-80144 Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a commCritical 9.4 · Sep 22, 2026
- CVE-2026-80143 Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a commCritical 9.4 · Sep 22, 2026
- CVE-2025-67041 An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.High 8.6 · Mar 11, 2026
- CVE-2025-67039 An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.Critical 9.3 · Mar 11, 2026
- CVE-2025-67038 Lantronix EDS5000 Code InjectionExploited · Critical 9.3 · Mar 11, 2026
- CVE-2025-67037 An issue was discovered in Lantronix EDS5000 2.1.0.0R3.High 8.6 · Mar 11, 2026
- CVE-2025-67036 An issue was discovered in Lantronix EDS5000 2.1.0.0R3.High 8.6 · Mar 11, 2026
- CVE-2025-67035 An issue was discovered in Lantronix EDS5000 2.1.0.0R3.High 8.6 · Mar 11, 2026
- CVE-2025-67034 An issue was discovered in Lantronix EDS5000 2.1.0.0R3.High 8.6 · Mar 11, 2026
- CVE-2025-7766 Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remotHigh 8.6 · Jul 22, 2025
- CVE-2025-2567 An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring.Critical 9.3 · Apr 15, 2025
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.