{"schema":"threatline.record/2","record":{"id":"CVE-2026-75826","aliases":[],"summary":"Teltonika Command Injection in Backup function","details":"Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.","categories":["Unclassified"],"product":"RUT","vendor":"Teltonika Networks","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"RUT","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"RUT"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"RUTX","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"RUTX"},{"status":"affected","version":"7.22","lessThan":"7.25.2","versionType":"RUTX"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"RUTM","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"RUTM"},{"status":"affected","version":"7.22","lessThan":"7.25.2","versionType":"RUTM"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"RUTC","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"RUTC"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"ATRM","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"ATRM"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"TAP","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.25.2","versionType":"TAP"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"CAP","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"CAP"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"OXA","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"OXA"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"DAP","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"DAP"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"TRB","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"TRB"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"OTD","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"OTD"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"EBG","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"7.22","lessThan":"7.24.6","versionType":"EBG"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"SWM","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"1.9","lessThan":"1.10.4","versionType":"SWM"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"TSW","vendor":"Teltonika Networks","versions":[{"status":"affected","version":"1.9","lessThan":"1.10.4","versionType":"TSW"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUT","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUTX","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUTX","ecosystem":null},"version":"7.25.2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUTM","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUTM","ecosystem":null},"version":"7.25.2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"RUTC","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"ATRM","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"TAP","ecosystem":null},"version":"7.25.2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"CAP","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"OXA","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"DAP","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"TRB","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"OTD","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"EBG","ecosystem":null},"version":"7.24.6","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"SWM","ecosystem":null},"version":"1.10.4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","source_modified_at":"2026-10-14T19:00:22.708Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"TSW","ecosystem":null},"version":"1.10.4","basis":"first unaffected version stated in the CVE record"}],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00939,"percentile":0.60563,"score_date":"2026-10-23"},"published_at":"2026-10-13T06:59:06.919Z","modified_at":"2026-10-14T19:00:22.708Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-75826","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T19:00:22.708Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-75826","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-14T18:59:58.817850Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-14T19:00:22.708Z","content_hash":"8a15ef7a2959659d32a57fe61d2541558bec40356eeb2ddfa1c1dee03b9b5dfc"}}