CVE-2026-80154
Severity: Critical
Publish Date: September 21, 2026
Last Updated: September 21, 2026
Affected Products
Overview
An unauthenticated attacker that can access the web management portal on Lantronix Autonomous Out-of-Band devices can derive session tokens of logged-in users and bypass validation of those tokens in order to elevate privileges.
SLC9000
This CVE is addressed by firmware release v9.7.0.2R1 published on September 18, 2026.
Recommended Actions
- Upgrade to firmware version v9.7.0.2R1 or later.
SLC8000
This CVE is addressed by firmware release v9.7.0.5R2 published on September 18, 2026.
Recommended Actions
- Upgrade to firmware version v9.7.0.5R2 or later.
EMG8500
This CVE is addressed by firmware release v9.7.0.1R2 published on September 18, 2026.
Recommended Actions
- Upgrade to firmware version v9.7.0.1R2 or later.
EMG7500
This CVE is addressed by firmware release v9.7.0.1R2 published on September 18, 2026.
Recommended Actions
- Upgrade to firmware version v9.7.0.1R2 or later.
Support
For technical assistance or questions regarding this advisory, please contact [email protected].
Revision History
| Version | Date | Status | Description |
|---|---|---|---|
| 1.0 | September 21, 2026 | Fixed | New Firmware Available |
