Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-16455

Local privilege escalation via improper input sanitization in execl() call

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Teltonika-networks
Products
Rutos Tswos
CVE-2026-8914

Command injection in Profile change function

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Teltonika-networks
Products
Rutos Tswos
CVE-2024-8256

Incorrect Permission Assignment in RutOS based routers and TSWOS based managed switches

In Teltonika Networks RUTOS devices, running on versions 7.0 to 7.8 (excluding) and TSWOS devices running on versions 1.0 to 1.3 (excluding), due to incorrect permission handling a vulnerability exists which allows a lower privileged user with default permissions to access critical device resources via the API.

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Teltonika-networks
Products
Rutos Devices Tswos