ctrlINT What the industry said about every indicator, with the quote

CVE-2025-67038Vulnerability

Lantronix EDS5000 Code Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Recorded Future · last reported

Last reported 19 days ago

CISA KEVAdded 23 Jun 2026
Fix due 26 Jun 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS20.0%
higher than 97% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “…4 vulnerabilities, including Ivanti Connect Secure flaws CVE-2023-46805 and CVE-2024-21887 and newer bugs such as CVE-2026-36356 and CVE-2025-67038.”

    Infosecurity MagazineNews
    ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

  2. “CVE-2025-67038: (61205) Lantronix.EDS5000.CVE-2025-67038.Code.Injection”

    Fortinet Threat ResearchVendor
    ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

  3. “CVE-2025-67038”

    Recorded FutureVendor
    June 2026 CVE Landscape

Indicators reported together

named in the same reports

Also named with it: CVE-2024-21887, CVE-2023-46805, CVE-2022-36553, CVE-2025-34035, CVE-2024-23625, CVE-2026-36356, CVE-2026-25089, CVE-2026-39808, CVE-2026-11645, CVE-2026-28318, CVE-2026-20230, CVE-2026-35616, CVE-2026-33825, CVE-2025-55182, CVE-2026-21509, CVE-2025-8088, CVE-2025-6218, CVE-2026-35273, CVE-2021-27137, CVE-2026-46817

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-67038 here?
No account needed. We do not store your IP address.