{
  "id": "CVE-2025-67038",
  "vendor_project": "Lantronix",
  "product": "EDS5000",
  "description": "Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.",
  "kev_date_added": "2026-06-23",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}