High severity · published Oct 13, 2026
CVE-2026-75826
Teltonika Command Injection in Backup function
8.5
CVSS
0.9%
EPSS
No
On KEV
Description
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AT
ATRM · Teltonika Networks
7.22 before 7.24.6 · source: vendor
CA
CAP · Teltonika Networks
7.22 before 7.24.6 · source: vendor
DA
DAP · Teltonika Networks
7.22 before 7.24.6 · source: vendor
EB
EBG · Teltonika Networks
7.22 before 7.24.6 · source: vendor
OT
OTD · Teltonika Networks
7.22 before 7.24.6 · source: vendor
OX
OXA · Teltonika Networks
7.22 before 7.24.6 · source: vendor
RU
RUT · Teltonika Networks
7.22 before 7.24.6 · source: vendor
RU
RUTC · Teltonika Networks
7.22 before 7.24.6 · source: vendor
RU
RUTM · Teltonika Networks
7.22 before 7.24.6; 7.22 before 7.25.2 · source: vendor
RU
RUTX · Teltonika Networks
7.22 before 7.24.6; 7.22 before 7.25.2 · source: vendor
SW
SWM · Teltonika Networks
1.9 before 1.10.4 · source: vendor
TA
TAP · Teltonika Networks
7.22 before 7.25.2 · source: vendor