X300 Series Firmware Update

Overview

Lantronix has addressed multiple security vulnerabilities affecting the X300 Series Router. These vulnerabilities could allow an attacker to perform unauthorized actions under specific conditions.

The following CVEs are addressed by firmware release 2.6.0.4R6 published on June 29^th, 2026.

• CVE-2025-67034
• CVE-2025-67036
• CVE-2025-67037
• CVE-2025-67038

Recommended Actions

• Upgrade to firmware version 2.6.0.4R6 or later.
  • Download the latest firmware and release notes

Interim Mitigation (if unable to patch immediately)

• Replace default credentials, and prohibit weak passwords, to reduce the risk of brute force attacks and exploitation of authenticated vulnerabilities.
• Restrict network access to affected devices.
• Place affected devices behind a firewall.
• Limit management interfaces to trusted networks only.

Support

For technical assistance or questions regarding this advisory, please contact:

Email: [email protected]
Alternative Contact (if applicable): [email protected]