https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:34:10.851206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4338 CVE-2025-4338 — Lantronix Device Installer Improper Restriction of XML External Entity Reference 2026-10-15T12:34:10.852352+00:00

Affected: Lantronix Device Installer

Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device. An attacker could obtain credentials, access these network devices, and modify their configurations. An attacker may also gain access to the host running the Device Installer software or the password hash of the user running the application.