CVE-2026-84409

{
  "etk_id": "ETK-2026-29",
  "cve_id": "CVE-2026-84409",
  "display_id": "CVE-2026-84409",
  "ghsa_id": "GHSA-32j5-669h-cw7p",
  "euvd_id": "EUVD-2026-89466",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stored cross-site scripting in Lantronix G520 Series",
  "summary": "G520 Series devices before 2.6.0.7R6 can retain untrusted update metadata and render it in the administrative web interface without safe handling. An attacker able to influence update metadata may cause code to run in an administrator’s browser, potentially reaching privileged device-management functions when an administrator views the update information.",
  "mitigation": "Upgrade G520 Series devices to version 2.6.0.7R6. Until upgrades are complete, restrict update-metadata retrieval and administrative-interface access to trusted networks.",
  "vendor": "Lantronix",
  "product": "G520 Series",
  "affected": [
    {
      "affected_notes": [
        "2.6.0.4R6 stable"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "2.6.0.7R6"
      ],
      "package_name": "G520 Series",
      "purl": null
    }
  ],
  "cwes": [
    79
  ],
  "cvss_score": 7.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0039,
  "epss_percentile": 0.3179,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 60.24533898333333,
  "t0_at": "2026-09-29T21:02:09.711000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-09-29T21:02:09.711000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-09-29T21:02:09.711000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84409"
    }
  }
}