Skip to content
OpenAdvisories

Product · LANTRONIX

EMG8500

13 known vulnerabilities.

EMG8500 at a glance

Last 12 months
13
Critical · all time
10
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 13 vulnerabilities, 10 critical Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 20261310
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Critical 9.1
    CVE-2026-80156

    Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

    Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint tha…

    LANTRONIX SLC9000 EMG8500 SLB882
  • Critical 10.0
    CVE-2026-80155

    Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

    Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endp…

    LANTRONIX EMG8500 SLB882 SLC8000
  • Critical 9.6
    CVE-2026-80154

    Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass

    All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in u…

    LANTRONIX SLC8000 EMG7500 SLC9000
  • Critical 9.1
    CVE-2026-80152

    Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

    Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the …

    LANTRONIX SLC8000 EMG7500 SLC9000
  • Critical 9.1
    CVE-2026-80151

    Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

    Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the …

    LANTRONIX SLC9000 EMG8500 SLB882
  • High 7.5
    CVE-2026-80150

    Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter

    Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauth…

    LANTRONIX EMG8500 SLB882 SLC8000
  • High 8.6
    CVE-2026-80149

    Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter

    Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauth…

    LANTRONIX SLC8000 EMG7500 SLC9000
  • High 8.6
    CVE-2026-80148

    Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation

    Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauth…

    LANTRONIX EMG8500 SLB882 SLC8000
  • Critical 9.9
    CVE-2026-80147

    Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write

    Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute ar…

    LANTRONIX SLC8000 EMG7500 SLC9000
  • Critical 9.9
    CVE-2026-80146

    Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

    Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute ar…

    LANTRONIX EMG8500 SLB882 SLC8000
  • Critical 9.1
    CVE-2026-80145

    Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

    Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to exe…

    LANTRONIX SLC8000 EMG7500 SLC9000
  • Critical 9.9
    CVE-2026-80144

    Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

    Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands…

    LANTRONIX SLC8000 EMG7500 SLC9000
  • Critical 9.9
    CVE-2026-80143

    Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

    Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands…

    LANTRONIX SLC9000 EMG8500 SLB882