Teltonika Networks RUTOS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Teltonika Networks RUTOS: 3 record(s), with affected versions and fixes.

CVE-2026-18368 Medium · 6.0 CWE-122 Aug 13, 2026

Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

CVE-2026-16455 Medium · 6.9 CWE-93 Aug 13, 2026

Local privilege escalation via improper input sanitization in execl() call

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

CVE-2026-8914 High · 8.4 CWE-95 Jun 5, 2026

Command injection in Profile change function

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.