Vulnerabilidades do Teltonika Networks RUTOS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Teltonika Networks RUTOS: 3 registro(s), com versões afetadas e correções.

CVE-2026-18368 Média · 6.0 CWE-122 13/08/2026

Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

CVE-2026-16455 Média · 6.9 CWE-93 13/08/2026

Local privilege escalation via improper input sanitization in execl() call

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

CVE-2026-8914 Alta · 8.4 CWE-95 05/06/2026

Command injection in Profile change function

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.