---
id: CVE-2026-75826
title: >-
  Command injection in the backup function in Teltonika Networks RUTOS 7.22
  before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA,
  DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and
  TSWOS 1.9…
summary: >-
  Command injection in the backup function in Teltonika Networks RUTOS 7.22
  before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA,
  DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and
  TSWOS 1.9…
severity: none
cwe:
  - CWE-78
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T08:17:00.940'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-75826'
references:
  - url: >-
      https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++
    label: 001d69cf-3fc9-4203-93fb-9865b54e05b2
tags:
  - nvd
ingestedAt: '2026-10-13T07:17:52.322Z'
---

## Overview

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.