EUVD-2026-84514

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish SSH...

CVE-2026-80150

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish Telnet...

CVE-2026-80150

Lantronix autonomous out-of-band devices contain a server-side request forgery (SSRF) in the WebSSH/WebTelnet listener. The custom shellinaboxd process uses the rooturl parameter from the web connection to determine its own IP address; by modifying this parameter, an unauthenticated attacker can ...