What’s Vulnerable › Vulnerabilities
CVE-2026-75826: Teltonika Command Injection in Backup function
- Severity: high (CVSS 8.5 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-13 · updated 2026-10-16
- Weakness: CWE-78
Description
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
Affected products
- Teltonika Networks ATRM: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks CAP: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks DAP: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks EBG: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks OTD: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks OXA: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks RUT: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks RUTC: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks RUTM: from 7.22 before 7.24.6; from 7.22 before 7.25.2 — fixed in 7.24.6, 7.25.2
- Teltonika Networks RUTX: from 7.22 before 7.24.6; from 7.22 before 7.25.2 — fixed in 7.24.6, 7.25.2
- Teltonika Networks SWM: from 1.9 before 1.10.4 — fixed in 1.10.4
- Teltonika Networks TAP: from 7.22 before 7.25.2 — fixed in 7.25.2
- Teltonika Networks TRB: from 7.22 before 7.24.6 — fixed in 7.24.6
- Teltonika Networks TSW: from 1.9 before 1.10.4 — fixed in 1.10.4
How to fix
Upgrade to a fixed version: Teltonika Networks ATRM 7.24.6; Teltonika Networks CAP 7.24.6; Teltonika Networks DAP 7.24.6; Teltonika Networks EBG 7.24.6; Teltonika Networks OTD 7.24.6; Teltonika Networks OXA 7.24.6; Teltonika Networks RUT 7.24.6; Teltonika Networks RUTC 7.24.6; Teltonika Networks RUTM 7.24.6, 7.25.2; Teltonika Networks RUTX 7.24.6, 7.25.2; Teltonika Networks SWM 1.10.4; Teltonika Networks TAP 7.25.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-75826 or the next vulnerability affects your stack