<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Teltonika Networks — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/tlt_net" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Teltonika Networks (tlt_net).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/tlt_net.png</url>
      <title>Teltonika Networks — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-75826 · 8.5 HIGH — Teltonika Command Injection in Backup function</title>
      <link>https://vulnogram.org/CVE-2026-75826</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-75826</guid>
      <description>Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.…</description>
      <category>High</category>
      <pubDate>Tue, 13 Oct 2026 06:59:06 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-18368 · 6 MEDIUM — Heap buffer overflow in Modbusgwd</title>
      <link>https://vulnogram.org/CVE-2026-18368</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-18368</guid>
      <description>In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting…</description>
      <category>Medium</category>
      <pubDate>Thu, 13 Aug 2026 10:52:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-16455 · 6.9 MEDIUM — Local privilege escalation via improper input sanitization in execl() call</title>
      <link>https://vulnogram.org/CVE-2026-16455</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-16455</guid>
      <description>In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe call…</description>
      <category>Medium</category>
      <pubDate>Thu, 13 Aug 2026 10:48:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-8914 · 8.4 HIGH — Command injection in Profile change function</title>
      <link>https://vulnogram.org/CVE-2026-8914</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-8914</guid>
      <description>In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perfo…</description>
      <category>High</category>
      <pubDate>Fri, 05 Jun 2026 09:36:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-4687 · 7.2 HIGH — Account pre-hijacking through invite misuse</title>
      <link>https://vulnogram.org/CVE-2025-4687</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-4687</guid>
      <description>In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers compa…</description>
      <category>High</category>
      <pubDate>Thu, 29 May 2025 08:59:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-8256 · 5.9 MEDIUM — Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches</title>
      <link>https://vulnogram.org/CVE-2024-8256</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-8256</guid>
      <description>In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with defaul…</description>
      <category>Medium</category>
      <pubDate>Tue, 10 Dec 2024 08:56:55 GMT</pubDate>
    </item>
  </channel>
</rss>
