Database/Control plane, storage & DevOps
Lantronix Provisioning Manager: Provisioning Manager reads configuration files supplied by the network devices
Impact
Provisioning Manager reads configuration files supplied by the network devices it manages. Because it doesn't lock down XML external entity resolution, a device (or something spoofing one) can hand it a poisoned config file that leads to unauthenticated remote code execution on the host running Provisioning Manager — which typically has admin reach into the whole fleet of Lantronix devices it provisions.
Who can reach it
Attacker needs to get a malicious XML config file processed by Provisioning Manager — either by compromising/spoofing a managed device on the network, or by feeding it a crafted import file if the workflow allows manual uploads.
What to do
Software upgrade of Provisioning Manager to the patched release. This runs on a management workstation/server rather than the appliances themselves, so it's a single upgrade rather than a per-device fleet rollout — but treat it as high priority since it's the box with admin credentials to the whole console-server fleet.
References
Related entries
- Progress Kemp LoadMaster Multi Tenant: The Multi Tenant product line's REST API doesn't check whether a caller'sCVE-2026-59690 · Progress Kemp LoadMaster Multi TenantHigh
- Jenkins SonarQube Scanner Plugin: unrestricted URL scheme in dashboard links causes stored XSSCVE-2026-84665 · Jenkins SonarQube Scanner Plugin (dashboard link generation)High
- Jenkins Script Security Plugin (classpath entry approval): Script Security normally requires an administrator toCVE-2026-92127 · Jenkins Script Security Plugin (classpath entry approval)High
- Jenkins Warnings Plugin: unvalidated analysis results ID allows stored XSS in the controller UICVE-2026-92134 · Jenkins Warnings Plugin (analysis results ID validation)High
- Jenkins Coverage Plugin: unvalidated coverage results ID allows stored XSS in the controller UICVE-2026-92135 · Jenkins Coverage Plugin (coverage results ID validation)High
- Jenkins OWASP Dependency-Check Plugin: CWE values from reports are rendered unescaped, giving stored XSSCVE-2026-92136 · Jenkins OWASP Dependency-Check Plugin (report CWE rendering)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.