Skip to content
OpenAdvisories

Vendor

Teltonika

15 known vulnerabilities.

Teltonika at a glance

Last 12 months
5
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202621
Sep 202600
Aug 202620
Jul 202600
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202510
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202410

Products

Remote Management System 6 RUTOS 4 TSWOS 3 RUT 2 RUTX 2 RUTM 2 RUTC 2 ATRM 2 TAP 2 CAP 2 OXA 2 DAP 2 TRB 2 OTD 2 EBG 2 SWM 2 TSW 2 RUT model routers 2 RMS 1 Remote Management System (RMS) 0

Latest advisories

  • Critical max 9.0
    ICSA-23-131-08 8 CVEs

    Teltonika Remote Management System and RUT Model Routers

    Successful exploitation of these vulnerabilities could expose sensitive device information and device credentials, enable remote code execution, expose connected devices managed on the network, and allow impersonation of legitimate devices.

    Teltonika
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Critical 9.4
    CVE-2026-82104

    API permission bypass via logic bug

    In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be call…

    Teltonika OXA RUT TRB
  • High 8.5
    CVE-2026-75826

    Teltonika Command Injection in Backup function

    Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW an…

    Teltonika SWM TAP OXA
  • Medium 6.0
    CVE-2026-18368

    Heap buffer overflow in Modbusgwd

    In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a den…

    Teltonika RUTOS
  • Medium 6.9
    CVE-2026-16455

    Local privilege escalation via improper input sanitization in execl() call

    In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an e…

    Teltonika RUTOS TSWOS
  • High 8.4
    CVE-2026-8914

    Command injection in Profile change function

    In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform comman…

    Teltonika RUTOS TSWOS
  • High 7.2
    CVE-2025-4687

    Account pre-hijacking through invite misuse

    In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company withou…

    Teltonika RMS
  • Medium 5.9
    CVE-2024-8256

    Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

    In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permiss…

    Teltonika RUTOS TSWOS
  • High 8.0
    CVE-2023-32350

    Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injectio…

    Teltonika RUT model routers
  • High 8.0
    CVE-2023-32349

    Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper vali…

    Teltonika RUT model routers
  • High 8.8
    CVE-2023-2588

    Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ …

    Teltonika Remote Management System
  • High 7.5
    CVE-2023-2587

    Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the…

    Teltonika Remote Management System
  • Critical 9.0
    CVE-2023-2586

    Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously u…

    Teltonika Remote Management System
  • Medium 5.8
    CVE-2023-32348

    Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for c…

    Teltonika Remote Management System
  • High 8.1
    CVE-2023-32347

    Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify d…

    Teltonika Remote Management System
  • Medium 5.3
    CVE-2023-32346

    Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devic…

    Teltonika Remote Management System