CISA Alerts to Active Exploitation of Critical Flaw in Lantronix EDS5000 Devices

CISA has issued a warning about a critical code injection vulnerability in Lantronix EDS5000 Series devices that is currently being exploited. This flaw, identified as CVE-2025-67038 with a CVSS score of 9.8, could enable unauthorized command execution with high privileges. Federal agencies are urged to implement necessary fixes by June 26, 2026, to mitigate the risk.