Heap-Based Buffer Overflow in Teltonika Networks RUTOS Devices

CVE-2026-18368

What is CVE-2026-18368?

A vulnerability exists in Teltonika Networks RUTOS devices within the modbusgwd component, resulting from inadequate handling of Modbus TCP request data. This issue permits a remote, unauthenticated attacker to exploit the service, potentially leading to a heap-based buffer overflow. Such exploitation can disrupt device functionality, effectively resulting in a denial of service for users reliant on these devices.

References