Lantronix EDS5000, G520, and X300 OS Command Injection
Priority CRITICAL 99Exploited in the wildCWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.
Why it matters now
Exploitation Active In CISA KEV since 2026-06-23CISA due date 2026-06-26
EPSS 0.21146 97th percentileScored 2026-11-07
Fix Fixed EDS5000 series (Lantronix): 2.2.0.0R1G520 series (Lantronix): 2.6.0.4R6+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lantronix | EDS5000 series | up to 2.1.0.0R3 | 2.2.0.0R1 | Patch available | CNA |
| Lantronix | G520 series | before 2.6.0.4R6 | 2.6.0.4R6 | Patch available | CNA |
| Lantronix | X300 series | before 2.6.0.4R6 | 2.6.0.4R6 | Patch available | CNA |
| Lantronix | E210 series | before 3.21.0.0R1 | 3.21.0.0R1 | Patch available | CNA |
| Lantronix | E220 series | before 3.21.0.0R1 | 3.21.0.0R1 | Patch available | CNA |
- EDS5000 series VendorLantronix Affected up to 2.1.0.0R3 Fixed in 2.2.0.0R1 Patch available CNA
- G520 series VendorLantronix Affected before 2.6.0.4R6 Fixed in 2.6.0.4R6 Patch available CNA
- X300 series VendorLantronix Affected before 2.6.0.4R6 Fixed in 2.6.0.4R6 Patch available CNA
- E210 series VendorLantronix Affected before 3.21.0.0R1 Fixed in 3.21.0.0R1 Patch available CNA
- E220 series VendorLantronix Affected before 3.21.0.0R1 Fixed in 3.21.0.0R1 Patch available CNA
CPE configurations NVD · 66
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lantronix:eds5008_firmware:*:*:*:*:*:*:*:* | before 2.2.0.0r1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:eds5008:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:eds5016_firmware:*:*:*:*:*:*:*:* | before 2.2.0.0r1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:eds5016:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:eds5032_firmware:*:*:*:*:*:*:*:* | before 2.2.0.0r1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:eds5032:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g526gp12s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g526gp12s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g526gp17s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g526gp17s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
- cpe:2.3:o:lantronix:eds5008_firmware:*:*:*:*:*:*:*:* Versions before 2.2.0.0r1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:eds5008:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:eds5016_firmware:*:*:*:*:*:*:*:* Versions before 2.2.0.0r1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:eds5016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:eds5032_firmware:*:*:*:*:*:*:*:* Versions before 2.2.0.0r1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:eds5032:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g526gp12s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g526gp12s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g526gp17s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g526gp17s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
Show 56 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lantronix:g526gp1cs_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g526gp1cs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g526gp1asg_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g526gp1asg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g526gp1as_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g526gp1as:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g527gp22s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g527gp22s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g527gp27s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g527gp27s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g527gp2as_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g527gp2as:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g527gp2asg_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g527gp2asg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g528gp2fs_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g528gp2fs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g528gp2fsg_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g528gp2fsg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:g528gp2fsgc_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:g528gp2fsgc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x300f202s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x300f202s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x303f202s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x303f202s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x304g00as_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x304g00as:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x304g000s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x304g000s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x304g002s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x304g002s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x304g007s_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x304g007s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:x304g00cs_firmware:*:*:*:*:*:*:*:* | before 2.6.0.4R6 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:x304g00cs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e228g002s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e228g002s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e228g004s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e228g004s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e228g00cb28_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e228g00cb28:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e228g00cs_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e228g00cs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e213f102s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e213f102s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e214f002s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e214f002s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e214f00cs_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e214f00cs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e214g000s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e214g000s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e214g001s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e214g001s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e218f004s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e218f004s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
| cpe:2.3:o:lantronix:e218g107s_firmware:*:*:*:*:*:*:*:* | before 3.21.0.0R1 | Vulnerable | Lantronix |
| cpe:2.3:h:lantronix:e218g107s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lantronix |
- cpe:2.3:o:lantronix:g526gp1cs_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g526gp1cs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g526gp1asg_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g526gp1asg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g526gp1as_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g526gp1as:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g527gp22s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g527gp22s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g527gp27s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g527gp27s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g527gp2as_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g527gp2as:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g527gp2asg_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g527gp2asg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g528gp2fs_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g528gp2fs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g528gp2fsg_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g528gp2fsg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:g528gp2fsgc_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:g528gp2fsgc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x300f202s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x300f202s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x303f202s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x303f202s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x304g00as_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x304g00as:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x304g000s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x304g000s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x304g002s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x304g002s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x304g007s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x304g007s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:x304g00cs_firmware:*:*:*:*:*:*:*:* Versions before 2.6.0.4R6 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:x304g00cs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e228g002s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e228g002s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e228g004s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e228g004s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e228g00cb28_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e228g00cb28:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e228g00cs_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e228g00cs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e213f102s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e213f102s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e214f002s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e214f002s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e214f00cs_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e214f00cs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e214g000s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e214g000s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e214g001s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e214g001s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e218f004s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e218f004s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
- cpe:2.3:o:lantronix:e218g107s_firmware:*:*:*:*:*:*:*:* Versions before 3.21.0.0R1 Vulnerable ·Lantronix
- cpe:2.3:h:lantronix:e218g107s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lantronix
Remediation
- Fix · CNA EDS5000 series (Lantronix) Fixed in 2.2.0.0R1
- Fix · CNA G520 series (Lantronix) Fixed in 2.6.0.4R6
- Fix · CNA X300 series (Lantronix) Fixed in 2.6.0.4R6
- Fix · CNA E210 series (Lantronix) Fixed in 3.21.0.0R1
- Fix · CNA E220 series (Lantronix) Fixed in 3.21.0.0R1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Lantronix G520 series, X300 series 2.6.0.4R6
4 records Highest priority Priority CRITICAL 1 CRITICAL, 3 MEDIUM
Other records, highest priority first
- TI-2025-41111 Lantronix EDS5000, G520, and X300 OS Command InjectionPriority MEDIUM 40
- TI-2025-41110 Lantronix EDS5000, G520, and X300 OS Command InjectionPriority MEDIUM 40
- TI-2025-41108 Lantronix EDS5000, G520, and X300 OS Command InjectionPriority MEDIUM 40
Timeline
- 2026-06-23 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2025-67038
- 2026-10-03 Alias added: GHSA-55gq-23mv-cw8r
References
Advisory 3
- https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
Sources
- CVE-2025-67038 · CVE Program
- CVE-2025-67038 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-55gq-23mv-cw8r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences