Medium severity · published Aug 13, 2026
CVE-2026-18368
Heap buffer overflow in Modbusgwd
6.0
CVSS
0.3%
EPSS
No
On KEV
Description
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
due to improper handling of Modbus TCP request data. A remote,
unauthenticated attacker with access to the affected service could
trigger a heap-based buffer overflow, resulting in a denial of service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
RUTOS · Teltonika Networks
7.12.0 through 7.24.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18368
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18368
www.teltonika-networks.com
https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-18368
More from RUTOS
8.4
CVE-2026-8914
Command injection in Profile change function
6.9
CVE-2026-16455
Local privilege escalation via improper input sanitization in execl() call
