CVE-2025-7766 – Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

https://notcve.org/view.php?id=CVE-2025-7766

22 Jul 2025 — Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed. Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed. Lantronix Provisioning Manager version 7.10.3 suffers from an XML ... • https://packetstorm.news/files/id/208518 • CWE-611: Improper Restriction of XML External Entity Reference •