---
id: CVE-2026-18368
title: |-
  In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
   due to improper handling of Modbus TCP request data
summary: |-
  In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
   due to improper handling of Modbus TCP request data. A remote, 
  unauthenticated attacker with access to the affected service could 
  trigger a heap-based buffer ove…
severity: none
cwe:
  - CWE-122
published: '2026-08-13'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T19:15:18.627'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-18368'
references:
  - url: >-
      https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-18368
    label: 001d69cf-3fc9-4203-93fb-9865b54e05b2
tags:
  - nvd
epss: 0.00251
epssPercentile: 0.14596
ingestedAt: '2026-09-08T20:10:03.157Z'
---

## Overview

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd
 due to improper handling of Modbus TCP request data. A remote, 
unauthenticated attacker with access to the affected service could 
trigger a heap-based buffer overflow, resulting in a denial of service.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.