{"id":"CVE-2026-75826","title":"Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9…","summary":"Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9…","severity":"none","cwe":["CWE-78"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T08:17:00.940","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75826","references":[{"url":"https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++","label":"001d69cf-3fc9-4203-93fb-9865b54e05b2"}],"tags":["nvd"],"ingestedAt":"2026-10-13T07:17:52.322Z","slug":"CVE-2026-75826","body":"## Overview\n\nCommand injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}