Refine your search
2 vulnerabilities found for TRB by Teltonika Networks
CVE-2026-82104 (GCVE-0-2026-82104)
Vulnerability from cvelistv5
Published
2026-10-30 08:01
Modified
2026-10-30 16:57
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE‑863: Incorrect Authorization
Summary
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.
This issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teltonika Networks | RUT |
Version: 7.22 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-82104",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T16:57:34.390915Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T16:57:57.063Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "RUT",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "RUT"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTX",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "RUTX"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "RUTM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTC",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "RUTC"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ATRM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "ATRM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "TAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "CAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OXA",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "OXA"
}
]
},
{
"defaultStatus": "unaffected",
"product": "DAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "DAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TRB",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "TRB"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OTD",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "OTD"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EBG",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "7.24.2",
"status": "affected",
"version": "7.22",
"versionType": "EBG"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SWM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "1.10",
"status": "affected",
"version": "1.9",
"versionType": "SWM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TSW",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThanOrEqual": "1.10",
"status": "affected",
"version": "1.9",
"versionType": "TSW"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eIn Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\u003c/p\u003e\u003cp\u003eThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.\u003c/p\u003e"
}
],
"value": "In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10."
}
],
"impacts": [
{
"capecId": "CAPEC-1",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE\u2011863: Incorrect Authorization",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T08:01:55.034Z",
"orgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
"shortName": "tlt_net"
},
"references": [
{
"url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "API permission bypass via logic bug",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
"assignerShortName": "tlt_net",
"cveId": "CVE-2026-82104",
"datePublished": "2026-10-30T08:01:55.034Z",
"dateReserved": "2026-08-28T05:06:54.296Z",
"dateUpdated": "2026-10-30T16:57:57.063Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-75826 (GCVE-0-2026-75826)
Vulnerability from cvelistv5
Published
2026-10-13 06:59
Modified
2026-10-14 19:00
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')
Summary
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Teltonika Networks | RUT |
Version: 7.22 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75826",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-14T18:59:58.817850Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T19:00:22.708Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "RUT",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "RUT"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTX",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "RUTX"
},
{
"lessThan": "7.25.2",
"status": "affected",
"version": "7.22",
"versionType": "RUTX"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "RUTM"
},
{
"lessThan": "7.25.2",
"status": "affected",
"version": "7.22",
"versionType": "RUTM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "RUTC",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "RUTC"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ATRM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "ATRM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.25.2",
"status": "affected",
"version": "7.22",
"versionType": "TAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "CAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OXA",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "OXA"
}
]
},
{
"defaultStatus": "unaffected",
"product": "DAP",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "DAP"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TRB",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "TRB"
}
]
},
{
"defaultStatus": "unaffected",
"product": "OTD",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "OTD"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EBG",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "7.24.6",
"status": "affected",
"version": "7.22",
"versionType": "EBG"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SWM",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "1.10.4",
"status": "affected",
"version": "1.9",
"versionType": "SWM"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TSW",
"vendor": "Teltonika Networks",
"versions": [
{
"lessThan": "1.10.4",
"status": "affected",
"version": "1.9",
"versionType": "TSW"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eCommand injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.\u003c/p\u003e"
}
],
"value": "Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88 OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-13T07:38:37.887Z",
"orgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
"shortName": "tlt_net"
},
"references": [
{
"url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch\u003cbr\u003e TAP: update to 7.25.2 or later\u003cbr\u003eTSW, SWM: update to 1.10.4 or later"
}
],
"value": "RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch\n TAP: update to 7.25.2 or later\nTSW, SWM: update to 1.10.4 or later"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Teltonika Command Injection in Backup function",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
"assignerShortName": "tlt_net",
"cveId": "CVE-2026-75826",
"datePublished": "2026-10-13T06:59:06.919Z",
"dateReserved": "2026-08-18T10:56:03.319Z",
"dateUpdated": "2026-10-14T19:00:22.708Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}