CVE-2026-75826 — Teltonika Command Injection in Backup function

Description (CNA)

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

Affected (CNA)

Vendor / product	Versions
Teltonika Networks / RUT	affected 7.22 before 7.24.6
Teltonika Networks / RUTX	affected 7.22 before 7.24.6; affected 7.22 before 7.25.2
Teltonika Networks / RUTM	affected 7.22 before 7.24.6; affected 7.22 before 7.25.2
Teltonika Networks / RUTC	affected 7.22 before 7.24.6
Teltonika Networks / ATRM	affected 7.22 before 7.24.6
Teltonika Networks / TAP	affected 7.22 before 7.25.2
Teltonika Networks / CAP	affected 7.22 before 7.24.6
Teltonika Networks / OXA	affected 7.22 before 7.24.6
Teltonika Networks / DAP	affected 7.22 before 7.24.6
Teltonika Networks / TRB	affected 7.22 before 7.24.6
Teltonika Networks / OTD	affected 7.22 before 7.24.6
Teltonika Networks / EBG	affected 7.22 before 7.24.6
Teltonika Networks / SWM	affected 1.9 before 1.10.4
Teltonika Networks / TSW	affected 1.9 before 1.10.4

CWE

CWE-78

References

https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.