CVE-2026-75826: Teltonika Command Injection in Backup function
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Teltonika Networks RUTOS for RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devicesto a version that resolves this vulnerability.Fixed in 7.24.6 - Upgrade
Upgrade
Teltonika Networks RUTOS for RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devicesto a version that resolves this vulnerability.Fixed in 7.25.2 - Upgrade
Upgrade
Teltonika Networks RUTOS for TAP devicesto a version that resolves this vulnerability.Fixed in 7.25.2 - Upgrade
Upgrade
Teltonika Networks TSWOS for TSW and SWM devicesto a version that resolves this vulnerability.Fixed in 1.10.4
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be remote and authenticated. The provided information does not indicate that unauthenticated exploitation is possible.
Which device families and software release ranges are affected?
RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices are affected on RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2. TAP devices are affected on RUTOS 7.22 before 7.25.2, while TSW and SWM devices are affected on TSWOS 1.9 before 1.10.4.
What is the impact if exploitation succeeds?
An authenticated remote attacker can execute arbitrary operating-system commands through the backup function. This can provide command execution with the privileges available to the affected backup functionality.