CVE-2026-80156criticalCWE-22

CVE-2026-80156: critical vulnerability in LANTRONIX SLC8000

Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Published 22 Sep 2026 · Updated 24 Sep 2026

Follow this CVE + Monitor EMG7500 + Monitor EMG8500

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.4epss 0.7%

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location on the device's filesystem, leading to remote code execution. The upload filename validation strips backslash characters but does not subsequently check for forward slashes when a backslash is detected; by supplying a filename containing both characters an attacker writes outside the intended upload directory to any writable path. Attackers can use this vulnerability to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-connected devices.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Affected products

LANTRONIX · EMG7500 LANTRONIX · EMG8500 LANTRONIX · SLB882 LANTRONIX · SLC8000 LANTRONIX · SLC9000 LANTRONIX · SLCx-02 LANTRONIX · SLCx-03

Related CVEs — LANTRONIX SLC8000

In the same product, most dangerous first.

CVE-2026-80145CRITICALLantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs passwordEPSS 1.9%CVE-2026-80144CRITICALLantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom writeEPSS 1.7%CVE-2026-80143CRITICALLantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom readEPSS 1.7%CVE-2026-80152CRITICALLantronix Autonomous Out-of-Band Devices OS Command Injection via set script scheduleEPSS 1.7%CVE-2026-80151CRITICALLantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs downloadEPSS 1.7%CVE-2026-80155CRITICALLantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path TruncationEPSS 1.0%

References

https://revrb.net/2026/09/21/revrb-lantern.html https://ts.lantronix.com/ftp/emg/EMG_7500/9.7.0.1R2/https://ts.lantronix.com/ftp/emg/EMG_8500/9.7.0.1R2/https://ts.lantronix.com/ftp/slc8000/9.7.0.5R2/https://ts.lantronix.com/ftp/SLC9000/9.7.0.2R1/https://www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-arbitrary-file-write-via-upload-filename-validation-bypass