CVE-2026-80156

Lantronix autonomous out-of-band devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a path traversal vulnerability in the web management portal upload endpoint. The root cause is that the filename validation strips backslash characters but fails to subsequently check fo...

CVE-2026-63374

AnyIO (a Python asynchronous networking framework) is vulnerable to TLS certificate spoofing prior to version 4.14.2 . The functions connect_tcp() and TLSStream.wrap() validate internationalized (non-ASCII) domain names using the Python standard library's IDNA 2003 encoding instead of the more ac...

CVE-2026-80155

Lantronix SLC8000 (before firmware v9.7.0.5 ), EMG8500/EMG7500 (before v9.7.0.1 ), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by an unauthenticated authentication bypass in the web management portal upload endpoint. The root cause is a snprintf call with a fixed-size buffer ...

CVE-2026-80154

CVE-2026-80154 affects all firmware versions of Lantronix SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 . The vulnerability resides in the web management portal , where session tokens are generated deterministically from the device model and current time at one-second resolution , yield...

CVE-2026-80152

Lantronix SLC8000 (before firmware v9.7.0.3), EMG8500/EMG7500 (before v9.7.0.1), and SLB882/SLCx-03/SLCx-02 (all firmware versions) contain an OS command injection in the set script schedule command, which passes unsanitized user input to a system() call. An authenticated attacker with the servic...

CVE-2026-92706

Dark Reader , a browser extension that darkens web page colors, is vulnerable in its image inversion pipeline prior to version 4.9.126. A website can cause the extension to request an unauthenticated icon-like bitmap from a locally running web server when the resource uses a known public-like HTT...

CVE-2026-80151

Lantronix Autonomous Out-of-Band Devices (SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02) are affected by an OS command injection in the set nfs download command, which passes unsanitized user input to a system() call. Authen...

CVE-2026-80150

Lantronix autonomous out-of-band devices contain a server-side request forgery (SSRF) in the WebSSH/WebTelnet listener. The custom shellinaboxd process uses the rooturl parameter from the web connection to determine its own IP address; by modifying this parameter, an unauthenticated attacker can ...

CVE-2026-80149

CVE-2026-80149 is a server-side request forgery (SSRF) vulnerability in the WebSSH/WebTelnet listener of Lantronix Autonomous Out-of-Band devices. The affected products are the SLC8000 (before firmware v9.7.0.3), EMG8500/EMG7500 (before firmware v9.7.0.1), and all firmware versions of the SLB882 ...

CVE-2026-80148

Lantronix autonomous out-of-band devices (SLC8000, EMG8500, EMG7500, SLB882) contain a server-side request forgery (SSRF) in the WebSSH/WebTelnet listener . The custom shellinaboxd binary builds the SSH connection target using a snprintf call with user-supplied input; by supplying an overlong use...

CVE-2026-85055

Twenty is an open-source CRM platform. Prior to version 2.22.0 , field-level read permissions are enforced on selected output fields but not on GraphQL or REST filter predicates . A workspace member or API key with object-level read access but denied field-level access can reference the restricte...

CVE-2026-80147

Lantronix SLC8000 (before firmware v9.7.0.2), EMG8500/EMG7500 (before firmware v9.7.0.1), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by a stack-based buffer overflow in an undocumented mfc eeprom write command. The command copies unbounded user input into a bounded stack buf...

CVE-2026-80146

Lantronix SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 are affected by a stack-based buffer overflow in an undocumented mfc eeprom read command that copies unbounded user input into a bounded stack buffer before passing it to a system() call. An authenticated attacker (any user via the...

CVE-2026-77621

Vector , a high-performance observability data pipeline, is vulnerable to arbitrary file write via its file sink in versions 0.10.0 through 0.57.0 . The file sink renders its output path from a template that accepts event fields; when an untrusted source supplies a field containing an absolute pa...

CVE-2026-80145

Lantronix SLC8000 (before firmware v9.7.0.2 ), EMG8500/EMG7500 (before firmware v9.7.0.1 ), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by a command injection vulnerability in the set cifs password CLI command. The root cause is unsanitized user input passed directly to a sys...

CVE-2026-77620

Vector is a high-performance observability data pipeline. In versions 0.15.0 through 0.57.0 , the logstash source feeds each decompressed frame back into its decoder without limiting nested compression depth. An unauthenticated remote peer that can reach the default 0.0.0.0:5044 listener can send...

CVE-2026-80144

Lantronix autonomous out-of-band devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a command injection vulnerability in an undocumented mfc eeprom write CLI command. An authenticated attacker can pass unsanitized input to a system() call, executing arbitrary shell comm...

CVE-2026-80143

Lantronix Autonomous Out-of-Band Devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a command injection vulnerability in the undocumented mfc eeprom read CLI command, which passes unsanitized user input directly to a system() call. Authenticated attackers can exploit th...

CVE-2026-77619

CVE-2026-77619 affects the logstash source in Vector (versions 0.15.0 through 0.57.0). The vulnerability stems from the source reading a 32-bit compressed-frame length from the network and sizing an in-memory buffer without an upper bound . An unauthenticated remote peer reaching the default 0.0....

CVE-2026-81883

radare2 , a UNIX-like reverse engineering framework and command-line toolset, is affected by an out-of-bounds read in its Lua 5.3 bytecode function parser prior to version 6.2.0 . The parser reads fixed function-metadata fields (two integers and three one-byte fields) immediately after a function...