Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-16455

Local privilege escalation via improper input sanitization in execl() call

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
tlt_net

Description

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Teltonika Networks RUTOS

Default version status: unaffected

  • RUTOS 7.07.1 to ≤ 7.24.1affected

Teltonika Networks TSWOS

Default version status: unaffected

  • 1.03 to ≤ 1.10affected

References