Actively exploited vulnerabilities affecting Lantronix products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-67038https://wildfortech.com/security#CVE-2025-67038This vulnerability allows an attacker to inject arbitrary operating system commands through the username parameter of Lantronix EDS5000 devices. What makes this especially dangerous is that injected commands execute with root privileges, meaning a successful attacker gains full control of the affected device. EDS5000 units are serial-to-network device servers commonly used in industrial and enterprise environments, so compromise could expose connected serial devices and broader network segments.Tue, 23 Jun 2026 00:00:00 GMTLantronixEDS5000