CVE-2025-59780: General Industrial Controls Lynx+ Gateway

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

Affected products

• General Industrial Controls Lynx+ Gateway: version R08 only; version V03 only; version V05 only; version V18 only

Published 2025-11-15. Last modified 2026-10-07.