Is CVE-2026-91191 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-91191

Upgrade firmware to version 2.6.0.7R6 released by Lantronix. Avoid using unencrypted HTTP connections for update metadata. Monitor Lantronix Vulnerability Library for additional updates. Contact Lantronix support for technical assistance if needed.

Quick answers

What is CVE-2026-91191?: Upgrade firmware to version 2.6.0.7R6 released by Lantronix. Avoid using unencrypted HTTP connections for update metadata. Monitor Lantronix Vulnerability Library for additional updates. Contact Lantronix support for technical assistance if needed.
How severe is CVE-2026-91191?: critical, CVSS 7.7
Is CVE-2026-91191 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-91191 be mitigated?: Upgrade firmware to version 2.6.0.7R6 released by Lantronix. Avoid using unencrypted HTTP connections for update metadata. Monitor Lantronix Vulnerability Library for additional updates. Contact Lantronix support for technical assistance if needed.

CVSS

7.7

Vendor

Lantronix

Published

Oct 1, 2026 · 03:44

Patch

Unknown / not confirmed

Affected products

Lantronix G520 Series Cellular Gateway

Mitigation

Critical Vulnerabilities Affect Lantronix G520 Series Cellular Gateways

CISA has issued an industrial control systems advisory detailing two critical vulnerabilities in the Lantronix G520 Series Cellular Gateway. CVE-2026-84409 involves improper neutralization of input during web page generation (cross-site scripting) combined with a command execution interface, allowing attackers with metadata influence to execute arbitrary code with root privileges. CVE-2026-91191 stems from improper verification of cryptographic signatures and an exposed production private key, enabling unauthorized software packages to be accepted as authentic and executed with root privileges during boot. Both vulnerabilities affect firmware version 2.6.0.4R6_stable.

12m

CVE-2026-91191

Quick answers

Related News

Critical Vulnerabilities Affect Lantronix G520 Series Cellular Gateways