H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-67038

Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

Vulnerability
TypeVulnerability
External ID—
First seen2026-06-23
Last seen2026-06-23

Confidence

—

Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

Labels

exploitedkev

CISA KEV context

Vendor / productLantronix EDS5000
Added2026-06-23
Due date2026-06-26
9 recorded

Relationships

mitigates
from Remediate CVE-2025-67038
Mitigation
related-to
to Argument Injection
Technique
related-to
to Code Injection
Technique
related-to
to Command Delimiters
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to Leverage Executable Code in Non-Executable Files
Technique
related-to
to Manipulating User-Controlled Variables
Technique
related-to
to OS Command Injection
Technique
3 external

References

nvd
CVE-2025-67038
open
cwe
CWE-78
open
cwe
CWE-94
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance