A critical vulnerability in Lantronix EDS5000 Series devices, identified as CVE-2025-67038, is being actively exploited, according to a warning issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA)1. This code injection flaw has a CVSS score of 9.8, indicating a highly severe security risk. The vulnerability could allow attackers to execute arbitrary code, potentially leading to significant consequences. CISA has urged Federal Civilian Executive Branch agencies to apply the necessary fixes by June 26, 2026, to mitigate the risk of exploitation. The active exploitation of this vulnerability underscores the need for prompt action to prevent potential breaches. The fact that CVE-2025-67038 is being actively exploited makes it a patch-now situation for affected organizations, rather than a monitor-and-wait scenario, highlighting the importance of swift remediation to prevent potential attacks.