---
id: CVE-2026-75826
title: >-
  Command injection in the backup function in Teltonika Networks RUTOS 7.22
  before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA,
  DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and
  TSWOS 1.9…
summary: >-
  Command injection in the backup function in Teltonika Networks RUTOS 7.22
  before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA,
  DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and
  TSWOS 1.9…
severity: high
cvss: 8.5
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-78
vendor: Teltonika Networks
product: RUT
affected:
  - RUT >= 7.22 < 7.24.6
  - RUTX >= 7.22 < 7.24.6
  - RUTX >= 7.22 < 7.25.2
  - RUTM >= 7.22 < 7.24.6
  - RUTM >= 7.22 < 7.25.2
  - RUTC >= 7.22 < 7.24.6
  - ATRM >= 7.22 < 7.24.6
  - TAP >= 7.22 < 7.25.2
  - CAP >= 7.22 < 7.24.6
  - OXA >= 7.22 < 7.24.6
  - DAP >= 7.22 < 7.24.6
  - TRB >= 7.22 < 7.24.6
  - OTD >= 7.22 < 7.24.6
  - EBG >= 7.22 < 7.24.6
  - SWM >= 1.9 < 1.10.4
  - TSW >= 1.9 < 1.10.4
published: '2026-10-13'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:56:15.773'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-75826'
references:
  - url: >-
      https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-75826++
    label: 001d69cf-3fc9-4203-93fb-9865b54e05b2
tags:
  - nvd
  - cve.org
epss: 0.00939
epssPercentile: 0.60727
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-14T18:59:58.817850Z'
cvssSource: cna
ingestedAt: '2026-10-13T07:17:52.322Z'
---

## Overview

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices), RUTOS 7.22 before 7.25.2 (TAP devices), and TSWOS 1.9 before 1.10.4 (TSW and SWM devices) allows a remote authenticated attacker to execute arbitrary OS commands.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.