Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

2 vulnerabilities found for SWM by Teltonika Networks

CVE-2026-75826 (GCVE-0-2026-75826)

Vulnerability from nvd – Published: 2026-10-13 06:59 – Updated: 2026-10-13 07:38

Title

Teltonika Command Injection in Backup function

Summary

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

Severity

8.5 (High)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-78 - Improper neutralization of special elements used in an OS command ('OS command injection')

Assigner

tlt_net CNA under the icscert root

CNA scorecard – unranked: 4 records in the last 180 days, 10 needed details

References

1 reference

URL	Tags
https://www.teltonika-networks.com/support/securi…

Impacted products

14 products

Vendor	Product	Version
Teltonika Networks	RUT	Affected: 7.22 , < 7.24.6 (RUT)
Teltonika Networks	RUTX	Affected: 7.22 , < 7.24.6 (RUTX) Affected: 7.22 , < 7.25.2 (RUTX)
Teltonika Networks	RUTM	Affected: 7.22 , < 7.24.6 (RUTM) Affected: 7.22 , < 7.25.2 (RUTM)
Teltonika Networks	RUTC	Affected: 7.22 , < 7.24.6 (RUTC)
Teltonika Networks	ATRM	Affected: 7.22 , < 7.24.6 (ATRM)
Teltonika Networks	TAP	Affected: 7.22 , < 7.25.2 (TAP)
Teltonika Networks	CAP	Affected: 7.22 , < 7.24.6 (CAP)
Teltonika Networks	OXA	Affected: 7.22 , < 7.24.6 (OXA)
Teltonika Networks	DAP	Affected: 7.22 , < 7.24.6 (DAP)
Teltonika Networks	TRB	Affected: 7.22 , < 7.24.6 (TRB)
Teltonika Networks	OTD	Affected: 7.22 , < 7.24.6 (OTD)
Teltonika Networks	EBG	Affected: 7.22 , < 7.24.6 (EBG)
Teltonika Networks	SWM	Affected: 1.9 , < 1.10.4 (SWM)
Teltonika Networks	TSW	Affected: 1.9 , < 1.10.4 (TSW)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RUT",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUT"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RUTX",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUTX"
            },
            {
              "lessThan": "7.25.2",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUTX"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RUTM",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUTM"
            },
            {
              "lessThan": "7.25.2",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUTM"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RUTC",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "RUTC"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ATRM",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "ATRM"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TAP",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.25.2",
              "status": "affected",
              "version": "7.22",
              "versionType": "TAP"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CAP",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "CAP"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "OXA",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "OXA"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "DAP",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "DAP"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TRB",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "TRB"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "OTD",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "OTD"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EBG",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "7.24.6",
              "status": "affected",
              "version": "7.22",
              "versionType": "EBG"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "SWM",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "1.10.4",
              "status": "affected",
              "version": "1.9",
              "versionType": "SWM"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "TSW",
          "vendor": "Teltonika Networks",
          "versions": [
            {
              "lessThan": "1.10.4",
              "status": "affected",
              "version": "1.9",
              "versionType": "TSW"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCommand injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.\u003c/p\u003e"
            }
          ],
          "value": "Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88 OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper neutralization of special elements used in an OS command (\u0027OS command injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T07:38:37.887Z",
        "orgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
        "shortName": "tlt_net"
      },
      "references": [
        {
          "url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch\u003cbr\u003e    TAP: update to 7.25.2 or later\u003cbr\u003eTSW, SWM: update to 1.10.4 or later"
            }
          ],
          "value": "RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch\n    TAP: update to 7.25.2 or later\nTSW, SWM: update to 1.10.4 or later"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Teltonika Command Injection in Backup function",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2",
    "assignerShortName": "tlt_net",
    "cveId": "CVE-2026-75826",
    "datePublished": "2026-10-13T06:59:06.919Z",
    "dateReserved": "2026-08-18T10:56:03.319Z",
    "dateUpdated": "2026-10-13T07:38:37.887Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}