Log in Start free

Vulnerability · Published Sep 22, 2026 · Assigned by VulnCheck

CVE-2026-80156Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Critical 9.1

In plain English

A critical-severity path traversal in EMG7500 from LANTRONIX. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 46.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location on the device's filesystem, leading to remote code execution. The upload filename validation strips backslash characters but does not subsequently check for forward slashes when a backslash is detected; by supplying a filename containing both characters an attacker writes outside the intended upload directory to any writable path. Attackers can use this vulnerability to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-connected devices.

Affected products (as reported)

VendorProductVersions
LANTRONIX SLC8000 0 – before 9.7.0.5
LANTRONIX EMG8500 0 – before 9.7.0.1
LANTRONIX EMG7500 0 – before 9.7.0.1
LANTRONIX SLB882 *
LANTRONIX SLCx-03 *
LANTRONIX SLCx-02 *
LANTRONIX SLC9000 0 – before 9.7.0.2

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References