Pentagon vets Lantronix's drone computer days after CISA flagged root flaws in its gateways

Lantronix said on 1 October 2026 that its Open-Q 8550CS drone computer has joined the Blue UAS Framework, the Defense Contract Management Agency's list of vetted components for US government drone programs, after a review the company says ran more than six months beyond its existing certifications ¹. The coverage that ran traced to the paid release↗ ¹⁷. The eight days before it set a different record.

The Pentagon spent six months opening Lantronix's drone brain to scrutiny; in the eight days before the announcement, researchers published root-level flaws in two of the company's other shipping products ¹²³.

A listing that saves OEMs months

DCMA probed the module's hardware, bill of materials, firmware, data flows and supply chain, and the listing spares drone OEMs their own months of validation work ¹. Executive Order 14307, "Unleashing American Drone Dominance," directs agencies to expand the framework ¹.

Three product lines flagged since June

On 29 September, CISA warned that the G520 cellular gateway↗, deployed worldwide across transportation, energy and water, accepted unauthorized software packages and shipped its production signing key inside a publicly distributed SDK ². Both routes end in code execution with root privileges; both are patched in firmware 2.6.0.7R6, and CISA reports no known exploitation ².

On 23 September, the 0day Rubbish team disclosed an authenticated command-injection chain to root on the SGX5150 device server↗, scored 7.2, plus a Digest-authentication bypass scored 9.8 ³. The injection was verified in emulation rather than on hardware, and no CVE has been assigned ³.

June's flaw is already on the exploited list

In June, CISA had already placed a 9.8 unauthenticated flaw in EDS5000 console servers on its exploited-vulnerabilities catalog↗, one of 22 flaws Forescout found across Lantronix and Silex converters ⁴. The G520 has a patch; the SGX5150 report carries a vendor notification and no fix ²³. The pattern is the point.

What 2.39 times sales is buying

Unmanned systems earned $12.6 million of fiscal 2026 revenue, up from a minimal contribution a year earlier, on $120.9 million of total sales, and active engagements climbed from roughly 10 to more than 30 ⁵. The named roster runs from Teal Drones and Swarmer to AVT Australia ⁸.

Management guides drones to 15 to 20% of fiscal 2027 sales↗; on flat revenue that implies $18 million to $24 million, growth of 43 to 90% ⁵. The balance sheet is clean, more than $60 million in cash and no debt after repaying its last $8.7 million of borrowings, and the GAAP loss is narrowing ⁶.

GuruFocus↗ prices the stock at 2.39 times sales against a 1.4 times historical median, a $338 million market cap, and a GF Value of $3.36 against a $7.21 price ⁷.

1.8 million more shares, and a board handover

Holders will vote on adding 1.8 million shares to the 2020 equity plan↗, which held just 80,032 shares available for new awards at the record date, lifting the plan limit to 8,949,047 against 46,879,400 shares outstanding ⁹.

Chair Hoshi Printer, on the board since 2010 and audit chair throughout, and director Jim Auker leave at that meeting; the nominee is Jason Lamb, a former Navy SEAL officer who now runs The LGL Group ⁸. Strider Capital's newly reported 5.5% stake↗ carries zero votes and a passive certification ¹⁰.

Both records are true at once: one DCMA-vetted drone computer, and three other product lines patched or awaiting a CVE in four months. The re-rate holds only if those 30-plus engagements land in the fiscal 2027 guide before the dilution vote and the disclosure record do their own work.