CVE-2025-67035

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

• CWE-94

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02Third Party Advisory, US Government Resource

Published

Mar 11, 2026

Last Modified

Jul 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6702A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-67025Cross Site Scripting vulnerability in Anycomment anycomment.…6.1
• CVE-2025-6703Improper Input Validation vulnerability in Mozilla neqo lead…6.5
• CVE-2025-67030Directory Traversal vulnerability in the extractFile method …8.8
• CVE-2025-67031ORSEE (Online Recruitment System for Economic Experiments) 3…6.3
• CVE-2025-67034An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An a…8.8
• CVE-2025-67036An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The …8.8
• CVE-2025-67037An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An a…8.8
• CVE-2025-67038An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The …9.8
• CVE-2025-67039An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. Th…9.1
• CVE-2025-6704An arbitrary file writing vulnerability in the Secure PDF eX…9.8
• CVE-2025-67041An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. Th…9.8