Teltonika Command Injection in Backup function
Summary
| CVE | CVE-2026-75826 |
|---|---|
| State | PUBLISHED |
| Assigner | tlt_net |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-13 07:16:32 UTC |
| Updated | 2026-10-16 19:56:15 UTC |
| Description | Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands. |
Risk And Classification
Primary CVSS: v4.0 8.5 HIGH from 001d69cf-3fc9-4203-93fb-9865b54e05b2
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS: 0.009390000 probability, percentile 0.601960000 (date 2026-10-16)
Problem Types: CWE-78 | CWE-78 CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | 001d69cf-3fc9-4203-93fb-9865b54e05b2 | Secondary | 8.5 | HIGH | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/C... |
| 4.0 | CNA | CVSS | 8.5 | HIGH | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
CVSS v4.0 Breakdown
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Teltonika Networks | RUT | affected 7.22 7.24.6 RUT | Not specified |
| CNA | Teltonika Networks | RUTX | affected 7.22 7.24.6 RUTX | Not specified |
| CNA | Teltonika Networks | RUTX | affected 7.22 7.25.2 RUTX | Not specified |
| CNA | Teltonika Networks | RUTM | affected 7.22 7.24.6 RUTM | Not specified |
| CNA | Teltonika Networks | RUTM | affected 7.22 7.25.2 RUTM | Not specified |
| CNA | Teltonika Networks | RUTC | affected 7.22 7.24.6 RUTC | Not specified |
| CNA | Teltonika Networks | ATRM | affected 7.22 7.24.6 ATRM | Not specified |
| CNA | Teltonika Networks | TAP | affected 7.22 7.25.2 TAP | Not specified |
| CNA | Teltonika Networks | CAP | affected 7.22 7.24.6 CAP | Not specified |
| CNA | Teltonika Networks | OXA | affected 7.22 7.24.6 OXA | Not specified |
| CNA | Teltonika Networks | DAP | affected 7.22 7.24.6 DAP | Not specified |
| CNA | Teltonika Networks | TRB | affected 7.22 7.24.6 TRB | Not specified |
| CNA | Teltonika Networks | OTD | affected 7.22 7.24.6 OTD | Not specified |
| CNA | Teltonika Networks | EBG | affected 7.22 7.24.6 EBG | Not specified |
| CNA | Teltonika Networks | SWM | affected 1.9 1.10.4 SWM | Not specified |
| CNA | Teltonika Networks | TSW | affected 1.9 1.10.4 TSW | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.teltonika-networks.com/support/security-centre | 001d69cf-3fc9-4203-93fb-9865b54e05b2 | www.teltonika-networks.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Additional Advisory Data
Solutions
CNA: RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, EBG: update to 7.24.6 or later on the 7.24 branch, or 7.25.2 or later on the 7.25 branch TAP: update to 7.25.2 or later TSW, SWM: update to 1.10.4 or later