CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

CISA warns of active exploitation of a critical code-injection RCE (CVE-2025-67038, CVSS 9.8) impacting Lantronix EDS5000 Series devices and confirms in-the-wild abuse of three high-severity Ubiquiti UniFi OS flaws (CVE-2026-34908/34909/34910) that can be chained to obtain root shells and have been used to deploy commodity malware; vendors have released patches and agencies are urged to apply fixes immediately.