CVE-2026-16455 — Local privilege escalation via improper input sanitization in execl() call

CVE-2026-16455

Local privilege escalation via improper input sanitization in execl() call PUBLISHED

Description (CNA)

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

Affected (CNA)

Vendor / product	Versions
Teltonika Networks / RUTOS	affected RUTOS 7.07.1 through 7.24.1
Teltonika Networks / TSWOS	affected 1.03 through 1.10

CWE

CWE-93

References

https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-16455++

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.