What’s Vulnerable › Vulnerabilities
CVE-2026-16455: Local privilege escalation via improper input sanitization in execl() call
- Severity: medium (CVSS 6.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-13 · updated 2026-09-08
- Weakness: CWE-93
Description
In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.
Affected products
- Teltonika Networks RUTOS: from RUTOS 7.07.1 through 7.24.1
- Teltonika Networks TSWOS: from 1.03 through 1.10
References
Get alerted when CVE-2026-16455 or the next vulnerability affects your stack