CVE-2026-18368
MEDIUM—CVSS v3
—CVSS v2
0.25%
EPSS (exploit probability)
CWE-122CWE
Description
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
due to improper handling of Modbus TCP request data. A remote,
unauthenticated attacker with access to the affected service could
trigger a heap-based buffer overflow, resulting in a denial of service.
Affected routers (7)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch Status |
|---|---|---|---|---|---|
| Teltonika Networks | Teltonika RUT241 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUT360 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUT956 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUTM50 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUTX11 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUTX12 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |
| Teltonika Networks | Teltonika RUTX50 | — |
versionStartIncluding=7.12.0, versionEndIncluding=7.24.1 | — | Unpatched |