Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 12, 2026
CVE-2025-67036
CVE-2025-67036
Description
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root privileges.
Affected products
2- Lantronix/EDS5000description
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.