LTRX is trading 5.9% down at $5.33 after the Cybersecurity and Infrastructure Security Agency (CISA) added a critical code injection flaw in the company's hardware to its Known Exploited Vulnerabilities (KEV) catalog.

  • The vulnerability, identified as CVE-2025-67038, affects Lantronix’s EDS5000 devices and is reportedly being exploited in the wild.
  • Shares have faced persistent pressure over recent sessions, suggesting the CISA notice is compounding broader selling momentum.
  • Inclusion in the KEV catalog typically weighs on sentiment for hardware vendors as it mandates federal agencies to patch the flaw within specific timeframes.