CVE-2025-7766

8.6 highEPSS 2.1%

High (8.6). EPSS 2.1% chance of exploitation in the next 30 days.

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2025-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Version+of+Lantronix+Provisioning+Manager+LPM
https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-02

Check your stack JSON