{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Lantronix vulnerabilities","home_page_url":"https://patchfirst.co/vendor/lantronix/","feed_url":"https://patchfirst.co/feed/vendor/lantronix.json","description":"New and newly exploited Lantronix CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-109439","url":"https://patchfirst.co/cve/CVE-2026-109439/","title":"CVE-2026-109439: Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication…","content_text":"LANTRONIX · XPress-DR. Not in CISA KEV. EPSS 0.6% (higher than 49.6% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.","summary":"Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T19:00:33.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.00618,"percentile":0.49592},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"LANTRONIX","product":"XPress-DR","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-67038#kev","url":"https://patchfirst.co/cve/CVE-2025-67038/","title":"[KEV] CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability","content_text":"Lantronix · EDS5000. In CISA KEV since 2026-06-23. ENISA EUVD lists it as exploited. EPSS 20.3% (higher than 97.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.4 of 100.","summary":"Lantronix EDS5000 Code Injection Vulnerability","date_published":"2026-06-23T00:00:00.000Z","date_modified":"2026-09-08T19:00:57.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.4,"kev":{"dateAdded":"2026-06-23","ransomware":false},"epss":{"score":0.20286,"percentile":0.97471},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Lantronix","product":"EDS5000","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}