# CVE-2026-80150: Lantronix SLC/EMG/SLB out-of-band management server-side request forgery

Source: https://junglewise.ai/threats/cve-2026-80150-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-22. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-80150 · Severity: high · CVSS 7.5 · Published 2026-09-22

Lantronix out-of-band management devices (SLC8000, SLC9000, EMG8500, EMG7500, and SLB882) used to provide remote serial access to network infrastructure contain a vulnerability allowing unauthenticated attackers to redirect connections to arbitrary hosts. An attacker can exploit this to access internal network systems that would normally be isolated, potentially gaining unauthorized access to serial-managed devices, credentials, and critical infrastructure controls across data centers, telecom networks, and government systems.

Technologies: [Lantronix EMG7500](https://junglewise.ai/threats/technologies/emg7500), [Lantronix EMG8500](https://junglewise.ai/threats/technologies/emg8500), [Lantronix SLB882](https://junglewise.ai/threats/technologies/slb882), [Lantronix SLC8000](https://junglewise.ai/threats/technologies/slc8000), [Lantronix SLC9000](https://junglewise.ai/threats/technologies/slc9000). Vendors: [Lantronix](https://junglewise.ai/threats/vendors/lantronix).

## Quick answers

**Is CVE-2026-80150 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-80150 being exploited in the wild.

**How severe is CVE-2026-80150?** High severity, with a CVSS score of 7.5, published 22 September 2026.

**Which products and versions are affected?** Lantronix EMG7500 before v9.7.0.1; Lantronix EMG8500 before v9.7.0.1; Lantronix SLB882 all versions; Lantronix SLC8000 before v9.7.0.3; and 1 more.

**Is there a fix for CVE-2026-80150?** A patch was published on 2026-09-18: SLC9000 v9.7.0.2 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-80150 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-80150?** Check whether you run Lantronix EMG7500, Lantronix EMG8500, Lantronix SLB882 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The WebSSH/WebTelnet listener in the shellinaboxd component fails to validate the rooturl parameter, allowing attackers to inject arbitrary host addresses that redirect outbound Telnet connections. The vulnerability requires no authentication and is exploitable over the network. An attacker can enumerate or connect to internal endpoints, potentially exposing serial console access to critical devices; patches are available for SLC8000 and EMG series but SLB882 devices remain unpatched.

## Affected products

- Lantronix SLC8000 before v9.7.0.3
- Lantronix SLC9000 before v9.7.0.2
- Lantronix EMG8500 before v9.7.0.1
- Lantronix EMG7500 before v9.7.0.1
- Lantronix SLB882 all versions

## Timeline

- 2026-09-22: disclosed
- 2026-09-18: patched: SLC9000 v9.7.0.2 released

## References

- [https://revrb.net/2026/09/21/revrb-lantern.html](https://revrb.net/2026/09/21/revrb-lantern.html)
- [https://ts.lantronix.com/ftp/SLC9000/9.7.0.2R1/](https://ts.lantronix.com/ftp/SLC9000/9.7.0.2R1/)

## Related threats

- [Lantronix SLC8000/SLC9000/EMG series path traversal RCE in web upload](https://junglewise.ai/threats/cve-2026-80156-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before)
- [Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal](https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before)
- [Lantronix Autonomous Out-of-Band Devices authentication bypass in web management](https://junglewise.ai/threats/cve-2026-80154-all-firmware-versions-of-lantronix-slc8000-slc9000-emg8500)
- [Lantronix Autonomous Out-of-Band Device command injection in CLI](https://junglewise.ai/threats/cve-2026-80152-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before)
- [Lantronix out-of-band management devices command injection in NFS download](https://junglewise.ai/threats/cve-2026-80151-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before)