Is CVE-2026-80154 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-80154 being exploited in the wild.

How severe is CVE-2026-80154?

Critical severity, with a CVSS score of 9.6, published 22 September 2026.

Which products and versions are affected?

Lantronix EMG7500 all versions; Lantronix EMG8500 all versions; Lantronix SLB882 all versions; Lantronix SLC8000 all versions; and 3 more.

Is there a fix for CVE-2026-80154?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-80154 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-80154?

Check whether you run Lantronix EMG7500, Lantronix EMG8500, Lantronix SLB882 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-80154: Lantronix Autonomous Out-of-Band Devices authentication bypass in web management

CVE-2026-80154 · Severity: critical · CVSS 9.6 · Published 2026-09-22

Lantronix out-of-band management devices used in data centers, telecommunications, and government networks contain a critical authentication bypass in their web management portal. Attackers can derive predictable session tokens and bypass IP validation to gain administrative control of these devices, which often control access to critical infrastructure and serial-connected systems. Successful exploitation could allow attackers to compromise network management capabilities and gain access to downstream devices in sensitive environments.

Technologies: Lantronix EMG7500, Lantronix EMG8500, Lantronix SLB882, Lantronix SLC8000, Lantronix SLC9000, Lantronix SLCx-02, Lantronix SLCx-03. Vendors: Lantronix.

Quick answers

Is CVE-2026-80154 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-80154 being exploited in the wild.
How severe is CVE-2026-80154?: Critical severity, with a CVSS score of 9.6, published 22 September 2026.
Which products and versions are affected?: Lantronix EMG7500 all versions; Lantronix EMG8500 all versions; Lantronix SLB882 all versions; Lantronix SLC8000 all versions; and 3 more.
Is there a fix for CVE-2026-80154?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-80154 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-80154?: Check whether you run Lantronix EMG7500, Lantronix EMG8500, Lantronix SLB882 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Session tokens are generated deterministically based only on device model and current time at one-second resolution, making them enumerable by unauthenticated attackers. The vulnerability combines weak token generation with a URI-based path routing flaw that bypasses per-session source-address validation, allowing an attacker to derive a valid token from one IP address and reuse it from another. This enables unauthenticated remote code execution and potential compromise of serial-attached infrastructure management devices.

Affected products

Lantronix SLC8000 all versions
Lantronix SLC9000 all versions
Lantronix EMG8500 all versions
Lantronix EMG7500 all versions
Lantronix SLB882 all versions
Lantronix SLCx-03 all versions
Lantronix SLCx-02 all versions

Timeline

2026-09-22: disclosed
2026-09-21: other: Researcher report published detailing 14 discovered vulnerabilities in Lantronix devices

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.