Remote Command Execution Vulnerability in Teltonika Networks RUTOS and TSWOS Devices
CVE-2026-82104

9.4CRITICAL

Key Information:

Status
Rut
Rutx
Rutm
Rutc
Vendor
CVE Published:
30 October 2026

What is CVE-2026-82104?

A security flaw in Teltonika Networks RUTOS devices (versions 7.22 to 7.24.2) and TSWOS devices (versions 1.9 to 1.10) allows unauthenticated users to bypass standard validations and directly invoke LUA functions. This could potentially lead to unauthorized execution of operating system commands, posing significant security risks.

Affected Version(s)

ATRM 7.22 <= 7.24.2

CAP 7.22 <= 7.24.2

DAP 7.22 <= 7.24.2

References

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.