Skip to content
OpenAdvisories
High ICSA-26-272-01 2 CVEs

Lantronix G520 Series Cellular Gateway

Published Sep 29, 2026 · Updated Sep 29, 2026

Vendor: LANTRONIX Product: G520 Series

Summary

Successful exploitation of these vulnerabilities could allow an attacker to replace software and execute arbitrary code with root privileges.

Vulnerabilities 2

  • High 7.5
    CVE-2026-84409

    Lantronix G520 Series Cellular Gateway Cross-site Scripting

    The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interfa…

    LANTRONIX G520 Series
  • High 7.5
    CVE-2026-91191

    Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

    The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packa…

    LANTRONIX G520 Series

Revision history

  1. #1

    Initial Publication

References