CVE-2026-109439: Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718
LANTRONIX · XPress-DR
No fix listed · Affected: LANTRONIX XPress-DR · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 50% of scored CVEs
DescriptionCVE.org
Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718. Attackers can send a type 0xF8 query to read live configuration data and a type 0xFD frame with exactly 0x78 body bytes to rewrite the device IP address and serial-channel forwarding records, causing changes to commit to EEPROM and persist across reboots. The XPress-DR product series reached end-of-life/end-of-support in February 2025.
Affected products2
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- LANTRONIX · XPress-DRup to and including 8.1.0.0
- LANTRONIX · XPress-DR-Iup to and including 8.1.0.0
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- LANTRONIX
- Published
- October 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-109439 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.