EMG8500 vulnerabilities

13 known vulnerabilities in EMG8500 from Lantronix. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

13vulnerabilities

10critical

3high

0exploited

9.3average CVSS score

Latest first

9.1 Critical severity
SLC8000: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-80156Sep 22, 2026Lantronix
Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that
10.0 Critical severity
SLC8000: Improper Limitation of a Pathname to a Restricted Directory
CVE-2026-80155Sep 22, 2026LantronixEPSS 1.03%
Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpo
9.6 Critical severity
SLC8000: Use of Insufficiently Random Values
CVE-2026-80154Sep 22, 2026Lantronix
All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to derive valid session tokens of logged-in us
9.1 Critical severity
SLC8000: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-80152Sep 22, 2026LantronixEPSS 1.66%
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the s
9.1 Critical severity
SLC8000: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-80151Sep 22, 2026LantronixEPSS 1.66%
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the s
7.5 High severity
SLC8000: Server-Side Request Forgery
CVE-2026-80150Sep 22, 2026Lantronix
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthe
8.6 High severity
SLC8000: Server-Side Request Forgery
CVE-2026-80149Sep 22, 2026Lantronix
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthe
8.6 High severity
SLC8000: Server-Side Request Forgery
CVE-2026-80148Sep 22, 2026Lantronix
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthe
9.9 Critical severity
SLC8000: Stack-based Buffer Overflow
CVE-2026-80147Sep 22, 2026Lantronix
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arb
9.9 Critical severity
SLC8000: Stack-based Buffer Overflow
CVE-2026-80146Sep 22, 2026Lantronix
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arb
9.1 Critical severity
SLC8000: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-80145Sep 22, 2026LantronixEPSS 1.86%
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to exec
9.9 Critical severity
SLC8000: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-80144Sep 22, 2026LantronixEPSS 1.69%
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands
9.9 Critical severity
SLC8000: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-80143Sep 22, 2026LantronixEPSS 1.69%
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands