Medium severity · published Aug 13, 2026
CVE-2026-18368
Heap buffer overflow in Modbusgwd
6.0
CVSS
0.3%
EPSS
No
On KEV
Description
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
RUTOS · Teltonika Networks
7.12.0 through 7.24.1 · source: vendor
Affected product
RU
RUTOS
Teltonika Networks
More from RUTOS
8.4
CVE-2026-8914
Command injection in Profile change function
6.9
CVE-2026-16455
Local privilege escalation via improper input sanitization in execl() call