Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.6epss 1.7%
from disclosure to weapon1 days
Published on NVDJul 22
1st PoC+1d
exploitation probability
1.7%top 26% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Affected products
Lantronix · Provisioning Managerpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/52417unverifiedgithubgithub.com/byteReaper77/CVE-2025-7766★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.