Teltonika-networks vulnerabilities
We track 6 vulnerabilities in Teltonika-networks products across 35 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Teltonika-networks vulnerabilities
- 9.4 Critical severity
RUT: Missing Authentication for Critical Functionality
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be calle
- 8.5 High severity
RUT: Improper Neutralization of Special Elements used in an OS Command
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and
- 8.4 High severity
RUTOS: Improper Neutralization of Directives in Dynamically Evaluated Code
In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command
- 7.2 High severity
RMS: Authentication Bypass Using an Alternate Path or Channel
In Teltonika Networks Remote Management System (RMS), it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without
- 8.8 High severity
RUT model routers: Improper Neutralization of Special Elements used in an OS Command
Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by
- 8.8 High severity
RUT model routers: External Control of System or Configuration Setting
Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacke