# Lantronix vulnerabilities Source: https://junglewise.ai/threats/vendors/lantronix Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/lantronix.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 23 vulnerabilities in Lantronix: 0 in the last 7 days and 15 in the last 90 days, 16 of them critical and 1 exploited in the wild. The most recent, CVE-2026-109439, was published on 14 October 2026. 1 vulnerability in the last four weeks, down 93% on the four before (14). 1 critical against 10. 19 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 15 - All time: 23 (16 critical, 1 exploited in the wild) ## About Lantronix A provider of hardware and software solutions for the Internet of Things (IoT) and remote management. ## Latest Lantronix vulnerabilities - [CVE-2026-109439: Lantronix XPress-DR authentication bypass in UDP configuration protocol](https://junglewise.ai/threats/cve-2026-109439-lantronix-xpress-dr-and-xpress-dr-i-cobos-family-firmware) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-84409: Lantronix G520 Series Cellular Gateway signature verification and XSS](https://junglewise.ai/threats/cve-2026-84409-lantronix-g520-series-cellular-gateway) (high, CVSS 7.5, published 29 Sep 2026) - [CVE-2026-80156: Lantronix SLC8000/SLC9000/EMG series path traversal RCE in web upload](https://junglewise.ai/threats/cve-2026-80156-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-80155: Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal](https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before) (critical, CVSS 10, published 22 Sep 2026) - [CVE-2026-80154: Lantronix Autonomous Out-of-Band Devices authentication bypass in web management](https://junglewise.ai/threats/cve-2026-80154-all-firmware-versions-of-lantronix-slc8000-slc9000-emg8500) (critical, CVSS 9.6, published 22 Sep 2026) - [CVE-2026-80152: Lantronix Autonomous Out-of-Band Device command injection in CLI](https://junglewise.ai/threats/cve-2026-80152-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-80151: Lantronix out-of-band management devices command injection in NFS download](https://junglewise.ai/threats/cve-2026-80151-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-80150: Lantronix SLC/EMG/SLB out-of-band management server-side request forgery](https://junglewise.ai/threats/cve-2026-80150-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before) (high, CVSS 7.5, published 22 Sep 2026) - [CVE-2026-80149: Lantronix SLC8000/SLC9000/EMG series server-side request forgery in WebSSH](https://junglewise.ai/threats/cve-2026-80149-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before) (high, CVSS 8.6, published 22 Sep 2026) - [CVE-2026-80148: Lantronix SLC8000/SLC9000/EMG8500/EMG7500 server-side request forgery](https://junglewise.ai/threats/cve-2026-80148-lantronix-slc8000-before-firmware-v9-7-0-3-slc9000-before) (high, CVSS 8.6, published 22 Sep 2026) - [CVE-2026-80147: Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command](https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80146: Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command](https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80145: Lantronix SLC/EMG/SLB devices command injection in CIFS password](https://junglewise.ai/threats/cve-2026-80145-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.1, published 22 Sep 2026) - [CVE-2026-80144: Lantronix SLC/EMG/SLB series command injection in eeprom write](https://junglewise.ai/threats/cve-2026-80144-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80143: Lantronix SLC/EMG/SLB out-of-band management devices command injection](https://junglewise.ai/threats/cve-2026-80143-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2025-70082: Lantronix EDS3000PS unverified password change in ltrx_evo](https://junglewise.ai/threats/cve-2025-70082-lantronix-eds3000ps-unverified-password-change-in-ltrx-evo) (critical, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67041: Lantronix EDS3000PS OS command injection in TFTP client](https://junglewise.ai/threats/cve-2025-67041-lantronix-eds3000ps-os-command-injection-in-tftp-client) (critical, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67039: Lantronix EDS3000PS authentication bypass in management pages](https://junglewise.ai/threats/cve-2025-67039-lantronix-eds3000ps-authentication-bypass-in-management-pages) (critical, CVSS 9.1, published 11 Mar 2026) - [CVE-2025-67038: Lantronix EDS5000 OS command injection in HTTP RPC module](https://junglewise.ai/threats/cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module) (critical, exploited in the wild, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67037: Lantronix EDS5000 OS command injection in tunnel parameter](https://junglewise.ai/threats/cve-2025-67037-lantronix-eds5000-os-command-injection-in-tunnel-parameter) (high, CVSS 8.8, published 11 Mar 2026) - [CVE-2025-67036: Lantronix EDS5000 OS command injection in Log Info page](https://junglewise.ai/threats/cve-2025-67036-lantronix-eds5000-os-command-injection-in-log-info-page) (high, CVSS 8.8, published 11 Mar 2026) - [CVE-2025-67035: Lantronix EDS5000 OS command injection in SSH management pages](https://junglewise.ai/threats/cve-2025-67035-lantronix-eds5000-os-command-injection-in-ssh-management-pages) (critical, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67034: Lantronix EDS5000 OS command injection in SSL credential deletion](https://junglewise.ai/threats/cve-2025-67034-lantronix-eds5000-os-command-injection-in-ssl-credential-deletion) (high, CVSS 8.8, published 11 Mar 2026) ## Most severe Lantronix vulnerabilities - [CVE-2025-67038: Lantronix EDS5000 OS command injection in HTTP RPC module](https://junglewise.ai/threats/cve-2025-67038-lantronix-eds5000-os-command-injection-in-http-rpc-module) (critical, exploited in the wild, CVSS 9.8, published 11 Mar 2026) - [CVE-2026-80155: Lantronix SLC8000 SLC9000 EMG authentication bypass in web management portal](https://junglewise.ai/threats/cve-2026-80155-lantronix-slc8000-before-firmware-v9-7-0-5-slc9000-before) (critical, CVSS 10, published 22 Sep 2026) - [CVE-2026-80144: Lantronix SLC/EMG/SLB series command injection in eeprom write](https://junglewise.ai/threats/cve-2026-80144-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80143: Lantronix SLC/EMG/SLB out-of-band management devices command injection](https://junglewise.ai/threats/cve-2026-80143-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80147: Lantronix SLC8000/SLC9000 stack buffer overflow in mfc eeprom command](https://junglewise.ai/threats/cve-2026-80147-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-80146: Lantronix SLC/EMG/SLB series stack buffer overflow in EEPROM command](https://junglewise.ai/threats/cve-2026-80146-lantronix-slc8000-slc9000-before-firmware-v9-7-0-2-emg8500) (critical, CVSS 9.9, published 22 Sep 2026) - [CVE-2026-109439: Lantronix XPress-DR authentication bypass in UDP configuration protocol](https://junglewise.ai/threats/cve-2026-109439-lantronix-xpress-dr-and-xpress-dr-i-cobos-family-firmware) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2025-70082: Lantronix EDS3000PS unverified password change in ltrx_evo](https://junglewise.ai/threats/cve-2025-70082-lantronix-eds3000ps-unverified-password-change-in-ltrx-evo) (critical, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67041: Lantronix EDS3000PS OS command injection in TFTP client](https://junglewise.ai/threats/cve-2025-67041-lantronix-eds3000ps-os-command-injection-in-tftp-client) (critical, CVSS 9.8, published 11 Mar 2026) - [CVE-2025-67035: Lantronix EDS5000 OS command injection in SSH management pages](https://junglewise.ai/threats/cve-2025-67035-lantronix-eds5000-os-command-injection-in-ssh-management-pages) (critical, CVSS 9.8, published 11 Mar 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 93% on the four before (14). 1 critical against 10. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 13 | 10 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 1 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Lantronix technologies - [Lantronix EMG7500](https://junglewise.ai/threats/technologies/emg7500): 13 vulnerabilities - [Lantronix EMG8500](https://junglewise.ai/threats/technologies/emg8500): 13 vulnerabilities - [Lantronix SLB882](https://junglewise.ai/threats/technologies/slb882): 13 vulnerabilities - [Lantronix SLC8000](https://junglewise.ai/threats/technologies/slc8000): 13 vulnerabilities - [Lantronix SLC9000](https://junglewise.ai/threats/technologies/slc9000): 13 vulnerabilities - [Lantronix SLCx-02](https://junglewise.ai/threats/technologies/slcx-02): 12 vulnerabilities - [Lantronix SLCx-03](https://junglewise.ai/threats/technologies/slcx-03): 12 vulnerabilities - [Lantronix EDS5008](https://junglewise.ai/threats/technologies/eds5008): 5 vulnerabilities - [Lantronix Eds5008 Firmware](https://junglewise.ai/threats/technologies/eds5008-firmware): 5 vulnerabilities - [Lantronix EDS5016](https://junglewise.ai/threats/technologies/eds5016): 5 vulnerabilities - [Lantronix Eds5016 Firmware](https://junglewise.ai/threats/technologies/eds5016-firmware): 5 vulnerabilities - [Lantronix EDS5032](https://junglewise.ai/threats/technologies/eds5032): 5 vulnerabilities - [Lantronix Eds5032 Firmware](https://junglewise.ai/threats/technologies/eds5032-firmware): 5 vulnerabilities - [Lantronix EDS5000 firmware](https://junglewise.ai/threats/technologies/eds5000-firmware): 4 vulnerabilities - [Lantronix EDS3000PS firmware](https://junglewise.ai/threats/technologies/eds3000ps-firmware): 3 vulnerabilities - [Lantronix Eds3008ps1ns](https://junglewise.ai/threats/technologies/eds3008ps1ns): 3 vulnerabilities - [Lantronix EDS3008PS1NS firmware](https://junglewise.ai/threats/technologies/eds3008ps1ns-firmware): 3 vulnerabilities - [Lantronix Eds3016ps1ns](https://junglewise.ai/threats/technologies/eds3016ps1ns): 3 vulnerabilities - [Lantronix EDS3016PS1NS firmware](https://junglewise.ai/threats/technologies/eds3016ps1ns-firmware): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Lantronix vulnerabilities", https://junglewise.ai/threats/vendors/lantronix, 9 November 2026.