CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

Federal cybersecurity authorities have raised the alarm as threat actors actively exploit a severe vulnerability in networking equipment, posing immediate risks to critical infrastructure. The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw affecting Lantronix EDS5000 Series devices, confirming that malicious actors are already leveraging this weakness in real-world attacks. The vulnerability, designated CVE-2025-67038, carries the maximum severity rating of 9.8 on the CVSS scale, indicating its potential to cause significant damage if left unaddressed. CISA has mandated that Federal Civilian Executive Branch agencies implement necessary patches by June 26, 2026, though cybersecurity experts strongly advise all organizations to act much sooner rather than later.

The flaw represents a code injection vulnerability that could enable