Command Injection Vulnerability in Teltonika Networks Backup Function

CVE-2026-75826

What is CVE-2026-75826?

A command injection vulnerability exists in the backup functionality of Teltonika Networks' RUTOS and TSWOS. This flaw allows a remote authenticated attacker to execute arbitrary OS commands on vulnerable devices. Specifically, it affects RUTOS versions 7.22 prior to 7.24.6 and 7.25 prior to 7.25.2, impacting a wide range of devices including RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices, as well as TAP devices running RUTOS 7.22 before 7.25.2 and TSWOS 1.9 before 1.10.4. Organizations using these products should apply the latest updates to mitigate potential risks.

References