CVE-2026-27869

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27869", "assignerOrgId": "ffb98d57-deaa-4918-a669-5225ccc13e39", "state": "PUBLISHED", "assignerShortName": "HackRTU", "dateReserved": "2026-02-24T08:59:28.139Z", "datePublished": "2026-06-17T08:13:37.802Z", "dateUpdated": "2026-07-01T11:17:35.841Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ffb98d57-deaa-4918-a669-5225ccc13e39", "shortName": "HackRTU", "dateUpdated": "2026-07-01T11:17:35.841Z"}, "title": "WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REGESTA SMART HD-PLC OF TELDAT", "datePublic": "2026-06-17T08:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-770", "description": "CWE-770 Allocation of resources without limits or throttling", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-227", "descriptions": [{"lang": "en", "value": "CAPEC-227 Sustained Client Engagement"}]}, {"capecId": "CAPEC-469", "descriptions": [{"lang": "en", "value": "CAPEC-469 HTTP DoS"}]}], "affected": [{"vendor": "Teldat", "product": "Regesta Smart HD-PLC - TLDPH16D2", "versions": [{"status": "affected", "version": "11.02.05.10.02"}, {"status": "unaffected", "version": "11.02.06.00.02"}], "defaultStatus": "unknown"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:teldat:regesta_smart_hd-plc_-_tldph16d2:11.02.05.10.02:*:*:*:*:*:*:*"}, {"vulnerable": false, "criteria": "cpe:2.3:a:teldat:regesta_smart_hd-plc_-_tldph16d2:11.02.06.00.02:*:*:*:*:*:*:*"}]}]}], "descriptions": [{"lang": "en", "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device.\u00a0This issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause <b>Denial of Service (DoS)</b> on the web interface of the device.&nbsp;<span>T</span><span>his issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02.</span><br>"}]}], "references": [{"url": "https://www.hackrtu.com/blog/CNA-HRTU-0003/", "tags": ["technical-description", "patch"]}, {"url": "https://www.hackrtu.com/blog/CNA-CVE-2026-27869/", "tags": ["technical-description", "patch"]}, {"url": "https://www.teldat.com/es/", "tags": ["product"]}, {"url": "https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf", "tags": ["product"]}, {"url": "https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}}], "solutions": [{"lang": "en", "value": "The provider has implement the new version\u00a011.02.06.00.02\u00a0which solves the security problems detected in the affected version. The end user has to download the new version in the Teldat - Client Support Portal and implement it in the device (\n https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US ).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The provider has implement the new version&nbsp;<b>11.02.06.00.02</b>&nbsp;which solves the security problems detected in the affected version. The end user has to download the new version in the <b>Teldat - Client Support Portal</b> and implement it in the device (\n<a href=\"https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US\" title=\"https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US\">https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US</a>)."}]}], "timeline": [{"time": "2026-02-20T09:00:00.000Z", "lang": "en", "value": "Vulnerability detection by the researchers"}, {"time": "2026-02-22T09:00:00.000Z", "lang": "en", "value": "Report from researchers to the CNA of HackRTU"}, {"time": "2026-02-25T09:00:00.000Z", "lang": "en", "value": "Report from HackRTU CNA to the provider"}, {"time": "2026-05-29T08:00:00.000Z", "lang": "en", "value": "New version published by the provider"}, {"time": "2026-06-17T08:00:00.000Z", "lang": "en", "value": "Vulnerabilities published by HackRTU's CNA"}], "credits": [{"lang": "en", "value": "Aar\u00f3n Flecha Men\u00e9ndez", "type": "finder"}, {"lang": "en", "value": "V\u00edctor Bello Cuevas", "type": "finder"}], "source": {"advisory": "HRTU#0003", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-17T14:20:10.059533Z", "id": "CVE-2026-27869", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-17T14:20:21.690Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27869", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-17T14:20:10.059533Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-17T14:20:17.657Z"}}], "cna": {"title": "WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REGESTA SMART HD-PLC OF TELDAT", "source": {"advisory": "HRTU#0003", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Aar\u00f3n Flecha Men\u00e9ndez"}, {"lang": "en", "type": "finder", "value": "V\u00edctor Bello Cuevas"}], "impacts": [{"capecId": "CAPEC-227", "descriptions": [{"lang": "en", "value": "CAPEC-227 Sustained Client Engagement"}]}, {"capecId": "CAPEC-469", "descriptions": [{"lang": "en", "value": "CAPEC-469 HTTP DoS"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Teldat", "product": "Regesta Smart HD-PLC - TLDPH16D2", "versions": [{"status": "affected", "version": "11.02.05.10.02"}, {"status": "unaffected", "version": "11.02.06.00.02"}], "defaultStatus": "unknown"}], "timeline": [{"lang": "en", "time": "2026-02-20T09:00:00.000Z", "value": "Vulnerability detection by the researchers"}, {"lang": "en", "time": "2026-02-22T09:00:00.000Z", "value": "Report from researchers to the CNA of HackRTU"}, {"lang": "en", "time": "2026-02-25T09:00:00.000Z", "value": "Report from HackRTU CNA to the provider"}, {"lang": "en", "time": "2026-05-29T08:00:00.000Z", "value": "New version published by the provider"}, {"lang": "en", "time": "2026-06-17T08:00:00.000Z", "value": "Vulnerabilities published by HackRTU's CNA"}], "solutions": [{"lang": "en", "value": "The provider has implement the new version\u00a011.02.06.00.02\u00a0which solves the security problems detected in the affected version. The end user has to download the new version in the Teldat - Client Support Portal and implement it in the device (\n https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US ).", "supportingMedia": [{"type": "text/html", "value": "The provider has implement the new version&nbsp;<b>11.02.06.00.02</b>&nbsp;which solves the security problems detected in the affected version. The end user has to download the new version in the <b>Teldat - Client Support Portal</b> and implement it in the device (\n<a href=\"https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US\" title=\"https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US\">https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&amp;none=true&amp;language=en-US</a>).", "base64": false}]}], "datePublic": "2026-06-17T08:00:00.000Z", "references": [{"url": "https://www.hackrtu.com/blog/CNA-HRTU-0003/", "tags": ["technical-description", "patch"]}, {"url": "https://www.hackrtu.com/blog/CNA-CVE-2026-27869/", "tags": ["technical-description", "patch"]}, {"url": "https://www.teldat.com/es/", "tags": ["product"]}, {"url": "https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf", "tags": ["product"]}, {"url": "https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device.\u00a0This issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02.", "supportingMedia": [{"type": "text/html", "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause <b>Denial of Service (DoS)</b> on the web interface of the device.&nbsp;<span>T</span><span>his issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02.</span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770 Allocation of resources without limits or throttling"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:teldat:regesta_smart_hd-plc_-_tldph16d2:11.02.05.10.02:*:*:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:teldat:regesta_smart_hd-plc_-_tldph16d2:11.02.06.00.02:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "ffb98d57-deaa-4918-a669-5225ccc13e39", "shortName": "HackRTU", "dateUpdated": "2026-07-01T11:17:35.841Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27869", "state": "PUBLISHED", "dateUpdated": "2026-07-01T11:17:35.841Z", "dateReserved": "2026-02-24T08:59:28.139Z", "assignerOrgId": "ffb98d57-deaa-4918-a669-5225ccc13e39", "datePublished": "2026-06-17T08:13:37.802Z", "assignerShortName": "HackRTU"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Regesta Smart HD-PLC - TLDPH16D2", "vendor": "Teldat", "versions": [{"status": "affected", "version": "11.02.05.10.02"}, {"status": "unaffected", "version": "11.02.06.00.02"}]}], "source": "ffb98d57-deaa-4918-a669-5225ccc13e39"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker with access via network to the Regesta Smart HD-PLC of the provider Teldat (in this case, NO registration action is required) who has the vulnerable software could, with a Slow Loris attack, cause Denial of Service (DoS) on the web interface of the device.\u00a0This issue affects Regesta Smart HD-PLC - TLDPH16D2: \n11.02.05.10.02."}, {"lang": "es", "value": "Un atacante con acceso a trav\u00e9s de la red al Regesta Smart HD-PLC del proveedor Teldat (en este caso, NO se requiere ninguna acci\u00f3n de registro) que tenga el software vulnerable podr\u00eda, con un ataque Slow Loris, causar una denegaci\u00f3n de servicio (DoS) en la interfaz web del dispositivo. Este problema afecta a Regesta Smart HD-PLC - TLDPH16D2: 11.02.05.10.02."}], "id": "CVE-2026-27869", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27869", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-17T14:20:10.059533Z", "version": "2.0.3"}}]}, "published": "2026-06-17T13:20:13.413", "references": [{"source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "url": "https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf"}, {"source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "url": "https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US"}, {"source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "url": "https://www.hackrtu.com/blog/CNA-CVE-2026-27869/"}, {"source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "url": "https://www.hackrtu.com/blog/CNA-HRTU-0003/"}, {"source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "url": "https://www.teldat.com/es/"}], "sourceIdentifier": "ffb98d57-deaa-4918-a669-5225ccc13e39", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "ffb98d57-deaa-4918-a669-5225ccc13e39", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "11.02.05.10.02"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "11.02.06.00.02"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Regesta Smart HD-PLC - TLDPH16D2", "source": "cna", "vendor": "Teldat"}, "product": "regesta_smart_hd-plc_-_tldph16d2", "vendor": "teldat"}], "created": "2026-06-18T12:45:03.466758+00:00", "updated": "2026-06-20T23:05:07.839336+00:00", "vendors": ["teldat", "teldat$PRODUCT$regesta_smart_hd-plc_-_tldph16d2"]}