Medium severity · published Aug 13, 2026
CVE-2026-16455
Local privilege escalation via improper input sanitization in execl() call
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
RUTOS · Teltonika Networks
RUTOS 7.07.1 through 7.24.1 · source: vendor
TS
TSWOS · Teltonika Networks
1.03 through 1.10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-16455
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-16455
www.teltonika-networks.com
https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-16455++
More from RUTOS
8.4
CVE-2026-8914
Command injection in Profile change function
6.0
CVE-2026-18368
Heap buffer overflow in Modbusgwd