CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718

Lantronix XPress-DR and XPress-DR-I CoBos-family firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718...

CVE-2026-109439

The Lantronix XPress-DR and XPress-DR-I (CoBos-family) devices with firmware through 8.1.0.0 are vulnerable to an unauthenticated configuration write via the UDP configuration protocol on port 30718 . A remote attacker can send a type 0xF8 query to read live configuration data or a type 0xFD fram...