Approved changes feed: RSS · Atom

cpe:2.3:a:teltonika_networks:rutos:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeltonika Networks (24d7b1d8-4234-5a51-b2a2-f5940dd044fb)
ProductRutos (f3f494e7-ba37-567e-a601-1e6fbb43fca8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8914 vulnerable 2026-06-08 08:08:58.738572 Command injection in Profile change function
In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.
Published: 2026-06-05T09:36:29.744Z
Updated: 2026-06-05T20:21:59.678Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8256 vulnerable 2026-06-08 07:00:23.420564 Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.
Published: 2024-12-10T08:56:55.195Z
Updated: 2024-12-10T15:35:59.297Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.