Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Release: LANTRONIX EMG7500, EMG8500, SLC9000 9.7.0.1, 9.7.0.2 Clear all filters
TI-2026-55404 CVE-2026-80156 · GHSA-hmch-26g2-q5qx

Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Priority MEDIUM 44

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the we…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00697 Published 2026-09-22 Fixed in 9.7.0.5, 9.7.0.1 +1 CWE-22
TI-2026-55403 CVE-2026-80155 · GHSA-h7c7-c453-99x2

Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

Priority MEDIUM 51

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability i…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01025 Published 2026-09-22 Fixed in 9.7.0.5, 9.7.0.1 +1 CWE-22
TI-2026-55401 CVE-2026-80152 · GHSA-r3rx-9f4x-5rmw

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55400 CVE-2026-80151 · GHSA-h8x4-hr84-5rp5

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55399 CVE-2026-80150 · GHSA-crpp-5w4c-qv65

Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55398 CVE-2026-80149 · GHSA-rpxf-vw4h-fp98

Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55397 CVE-2026-80148 · GHSA-6rw9-fmc4-f3gq

Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55396 CVE-2026-80147 · GHSA-gqp9-cvw4-f6q4

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write

Priority MEDIUM 43

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authentica…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00463 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-121
TI-2026-55395 CVE-2026-80146 · GHSA-88xg-5qpc-c627

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

Priority MEDIUM 44

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authentica…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00848 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-121
TI-2026-55394 CVE-2026-80145 · GHSA-6665-q8xg-hw4c

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01859 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55393 CVE-2026-80144 · GHSA-ggr5-38c6-hmch

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55392 CVE-2026-80143 · GHSA-8m6g-v32x-vpvf

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78