CVE-2025-67038

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 24, 2026

Last Seen

October 11, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Active Exploitation of Critical Vulnerabilities in Lantronix and Ubiquiti Devices72.9

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed active exploitation of critical vulnerabilities in Lantronix EDS5000-series devices and Ubiquiti's UniFi OS. The Lantronix vulnerability, CVE-2025-67038, allows unauthenticated command injection, impacting industrial auto...

ClingSTUN Linux Backdoor Exploits 24 IoT Vulnerabilities69.8

Researchers from FortiGuard Labs have identified a new Linux backdoor named ClingSTUN that exploits 24 known vulnerabilities in Internet of Things (IoT) devices. This malware turns infected devices into proxy nodes, using legitimate public STUN servers to obscure communications. The vulnerabilities...