Approved changes feed: RSS · Atom
cpe:2.3:a:teltonika_networks:rutos:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Teltonika Networks (24d7b1d8-4234-5a51-b2a2-f5940dd044fb) |
|---|---|
| Product | Rutos (f3f494e7-ba37-567e-a601-1e6fbb43fca8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18368 |
vulnerable | 2026-09-16 04:34:01.766197 |
Heap buffer overflow in Modbusgwd
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
due to improper handling of Modbus TCP request data. A remote,
unauthenticated attacker with access to the affected service could
trigger a heap-based buffer overflow, resulting in a denial of service.
Published: 2026-08-13T10:52:35.564Z
Updated: 2026-08-13T14:43:24.994Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16455 |
vulnerable | 2026-09-16 04:32:56.961719 |
Local privilege escalation via improper input sanitization in execl() call
In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.
Published: 2026-08-13T10:48:03.896Z
Updated: 2026-08-13T14:45:18.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8914 |
vulnerable | 2026-06-08 08:08:58.738572 |
Command injection in Profile change function
In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.
Published: 2026-06-05T09:36:29.744Z
Updated: 2026-06-05T20:21:59.678Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8256 |
vulnerable | 2026-06-08 07:00:23.420564 |
Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches
In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.
Published: 2024-12-10T08:56:55.195Z
Updated: 2024-12-10T15:35:59.297Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.