What’s Vulnerable › Vulnerabilities

CVE-2026-18368: Heap buffer overflow in Modbusgwd

• Severity: medium (CVSS 6.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-13 · updated 2026-10-23
• Weakness: CWE-122

Description

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

Affected products

• Teltonika Networks RUTOS: from 7.12.0 through 7.24.1

References

• https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-18368

Get alerted when CVE-2026-18368 or the next vulnerability affects your stack