CVE-2026-16455

MediumCVSS 6.9

Published: 13/08/2026(UTC)Updated: 08/09/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

Risk Assessment

Privilege escalation could allow unauthorized full control over the device, potentially leading to network and data security breaches.

Recommendation

Upgrade device firmware to a patched version and review user privileges.

Other vulnerabilities in Teltonika Networks RUTOS/TSWOS

CVE-2026-75826High
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS