CVE-2026-16455

MEDIUM
—CVSS v3
—CVSS v2
0.29% EPSS (exploit probability)
CWE-93CWE

Description

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

Affected routers (7)

VendorModelMatched viaAffected versionsFixed inPatch Status
Teltonika Networks Teltonika RUT241 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUT360 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUT956 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUTM50 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUTX11 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUTX12 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched
Teltonika Networks Teltonika RUTX50 — versionStartIncluding=7.07.1, versionEndIncluding=7.24.1 — Unpatched

External references