Federal Civilian Executive Branch (FCEB) Archives

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

25Jun

By RBNo Comments

News

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

Federal Civilian Executive Branch (FCEB) agencies are urged to implement the remedies by June 26, 2026, after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday about the active exploitation of a major security hole affecting Lantronix EDS5000 Series devices. The vulnerability in question is code injection bug CVE-2025-67038 (CVSS score: 9.8), which could lead to the execution of arbitrary instructions with elevated privileges. The vulnerability's description on CVE.org states that when the user's authentication fails, the HTTP RPC module runs a shell command to write logs. Without any sanitization, the username and the command are concatenated straight. Attackers can now insert any OS command into the username parameter. Root privileges are...

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

According to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), a high-severity security weakness in Apache ActiveMQ Classic has been actively exploited in the field. In order to address this, the government has updated its Known Exploited Vulnerabilities (KEV) catalog with the vulnerability, tagged as CVE-2026-34197 (CVSS score: 8.8), and mandated that Federal Civilian Executive Branch (FCEB) entities implement the solutions by April 30, 2026. According to descriptions, CVE-2026-34197 is an instance of incorrect input validation that may result in code injection, hence enabling an attacker to run arbitrary code on vulnerable installations. Naveen Sunkavally of Horizon3.ai claims that CVE-2026-34197 has been "hiding in plain sight" for 13 years. Sunkavally stated t...

CISA Orders Removal of Unsupported Edge Devices to Reduce Federal Network Risk

Over the next 12 to 18 months, Federal Civilian Executive Branch (FCEB) agencies have been directed by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to improve asset lifecycle management for edge network devices and eliminate those that are no longer receiving security updates from original equipment manufacturers (OEMs). Since state-sponsored threat actors use these devices as a preferred entry method to breach target networks, the agency stated that the action is intended to reduce technological debt and reduce the chance of compromise. Load balancers, firewalls, routers, switches, wireless access points, network security appliances, Internet of Things (IoT) edge devices, software-defined networks, and other real or virtual networking components that route netwo...