Log in Start free

Vulnerability · Published Oct 13, 2026 · Assigned by tlt_net

CVE-2026-75826Teltonika Command Injection in Backup function

High 8.5

In plain English

A high-severity OS command injection in ATRM from Teltonika Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).

Severity (CVSS 4.0)8.5High
Exploit odds (30 days)0.9%top 38.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

Affected products (as reported)

VendorProductVersions
Teltonika Networks RUT 7.22 – before 7.24.6
Teltonika Networks RUTX 7.22 – before 7.24.67.22 – before 7.25.2
Teltonika Networks RUTM 7.22 – before 7.24.67.22 – before 7.25.2
Teltonika Networks RUTC 7.22 – before 7.24.6
Teltonika Networks ATRM 7.22 – before 7.24.6
Teltonika Networks TAP 7.22 – before 7.25.2
Teltonika Networks CAP 7.22 – before 7.24.6
Teltonika Networks OXA 7.22 – before 7.24.6
Teltonika Networks DAP 7.22 – before 7.24.6
Teltonika Networks TRB 7.22 – before 7.24.6
Teltonika Networks OTD 7.22 – before 7.24.6
Teltonika Networks EBG 7.22 – before 7.24.6
Teltonika Networks SWM 1.9 – before 1.10.4
Teltonika Networks TSW 1.9 – before 1.10.4

Weakness: CWE-78 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References