CVE-2026-75826 Details
Description
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
A command injection vulnerability has been identified in the backup function of Teltonika Networks RUTOS and TSWOS operating systems. This issue affects several device categories within specific version ranges: RUTOS 7.22 prior to 7.24.6 and 7.25 prior to 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 prior to 7.25.2 (TAP devices), and TSWOS 1.9 prior to 1.10.4 (TSW and SWM devices). The vulnerability allows remote authenticated attackers to execute arbitrary operating system commands on the affected devices.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++ | Teltonika Networks | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | Teltonika Networks |
Affected Products
| Product | Versions |
|---|---|
| Teltonika Networks RUTOS | >= 7.22, < 7.24.6 >= 7.25, < 7.25.2 |
CPE
Remediation
| |
| Teltonika RUT | All versions |
CPE
Remediation
| |
| Teltonika RUTX | All versions |
CPE
Remediation
| |
| Teltonika RUTM | All versions |
CPE
Remediation
| |
| Teltonika RUTC | All versions |
CPE
Remediation
| |
| Teltonika ATRM | All versions |
CPE
Remediation
| |
| Teltonika CAP | All versions |
CPE
Remediation
| |
| Teltonika OXA | All versions |
CPE
Remediation
| |
| Teltonika DAP | All versions |
CPE
Remediation
| |
| Teltonika TRB | All versions |
CPE
Remediation
| |
| Teltonika OTD | All versions |
CPE
Remediation
| |
| Teltonika EBG | All versions |
CPE
Remediation
| |
| Teltonika RUTOS | All versions |
CPE
Remediation
| |
| Teltonika TAP | All versions |
CPE
Remediation
| |
| Teltonika TSWOS | All versions |
CPE
Remediation
| |
| Teltonika TSW | All versions |
CPE
Remediation
| |
| Teltonika SWM | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | CVE Modified | Teltonika Networks |
| Oct 13, 2026 | New CVE Received | Teltonika Networks |