Active Exploitation of Critical Vulnerabilities in Lantronix and Ubiquiti Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of critical vulnerabilities in Lantronix EDS5000-series devices and Ubiquiti's UniFi OS. The Lantronix vulnerability, CVE-2025-67038, allows unauthenticated command injection, impacting industrial automation systems. Ubiquiti's vulnerabilities, CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, enable remote code execution and could facilitate broader network breaches. CISA has ordered federal agencies to patch these vulnerabilities by June 26, 2026. The risks are heightened due to the critical roles these devices play in network infrastructure. Both vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog on June 23, 2026. The urgency is underscored by the potential for significant operational disruption in affected environments.

Key Points: • CISA confirmed active exploitation of CVE-2025-67038 in Lantronix devices. • Ubiquiti's vulnerabilities could allow attackers to gain full control of networks. • Federal agencies must patch these vulnerabilities by June 26, 2026.