High severity8.0NVD Advisory· Published Jul 22, 2025· Updated Apr 15, 2026

CVE-2025-7766

Description

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Tivoli Provisioning Managerllm-fuzzy

Patches

Vulnerability mechanics

References

ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Version+of+Lantronix+Provisioning+Manager+LPMnvd
www.cisa.gov/news-events/ics-advisories/icsa-25-203-02nvd

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000