{"id":"CVE-2026-82104","state":"PUBLISHED","title":"API permission bypass via logic bug","description":"In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.","publishedAt":"2026-10-30T08:01:55.034Z","updatedAt":"2026-10-30T16:57:57.063Z","severity":{"score":9.4,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","source":"tlt_net"},"assigner":"tlt_net","products":["Teltonika Networks RUT","Teltonika Networks RUTX","Teltonika Networks RUTM","Teltonika Networks RUTC","Teltonika Networks ATRM","Teltonika Networks TAP","Teltonika Networks CAP","Teltonika Networks OXA","Teltonika Networks DAP","Teltonika Networks TRB","Teltonika Networks OTD","Teltonika Networks EBG","Teltonika Networks SWM","Teltonika Networks TSW"],"affected":[{"vendor":"Teltonika Networks","product":"RUT","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUT"}]},{"vendor":"Teltonika Networks","product":"RUTX","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTX"}]},{"vendor":"Teltonika Networks","product":"RUTM","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTM"}]},{"vendor":"Teltonika Networks","product":"RUTC","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTC"}]},{"vendor":"Teltonika Networks","product":"ATRM","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"ATRM"}]},{"vendor":"Teltonika Networks","product":"TAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"TAP"}]},{"vendor":"Teltonika Networks","product":"CAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"CAP"}]},{"vendor":"Teltonika Networks","product":"OXA","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"OXA"}]},{"vendor":"Teltonika Networks","product":"DAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"DAP"}]},{"vendor":"Teltonika Networks","product":"TRB","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"TRB"}]},{"vendor":"Teltonika Networks","product":"OTD","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"OTD"}]},{"vendor":"Teltonika Networks","product":"EBG","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"EBG"}]},{"vendor":"Teltonika Networks","product":"SWM","defaultStatus":"unaffected","versions":[{"version":"1.9","status":"affected","lessThanOrEqual":"1.10","versionType":"SWM"}]},{"vendor":"Teltonika Networks","product":"TSW","defaultStatus":"unaffected","versions":[{"version":"1.9","status":"affected","lessThanOrEqual":"1.10","versionType":"TSW"}]}],"references":["https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-30T17:08:06.673Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82104.json","commit":"8a581a9da6180c99fa3232113dad4f8398ccbcc4","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82104","state":"PUBLISHED","datePublished":"2026-10-30T08:01:55.034Z","dateUpdated":"2026-10-30T16:57:57.063Z","assignerShortName":"tlt_net","assignerOrgId":"001d69cf-3fc9-4203-93fb-9865b54e05b2","dateReserved":"2026-08-28T05:06:54.296Z"},"containers":{"cna":{"title":"API permission bypass via logic bug","descriptions":[{"lang":"en","value":"In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10."}],"affected":[{"vendor":"Teltonika Networks","product":"RUT","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUT"}]},{"vendor":"Teltonika Networks","product":"RUTX","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTX"}]},{"vendor":"Teltonika Networks","product":"RUTM","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTM"}]},{"vendor":"Teltonika Networks","product":"RUTC","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"RUTC"}]},{"vendor":"Teltonika Networks","product":"ATRM","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"ATRM"}]},{"vendor":"Teltonika Networks","product":"TAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"TAP"}]},{"vendor":"Teltonika Networks","product":"CAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"CAP"}]},{"vendor":"Teltonika Networks","product":"OXA","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"OXA"}]},{"vendor":"Teltonika Networks","product":"DAP","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"DAP"}]},{"vendor":"Teltonika Networks","product":"TRB","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"TRB"}]},{"vendor":"Teltonika Networks","product":"OTD","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"OTD"}]},{"vendor":"Teltonika Networks","product":"EBG","defaultStatus":"unaffected","versions":[{"version":"7.22","status":"affected","lessThanOrEqual":"7.24.2","versionType":"EBG"}]},{"vendor":"Teltonika Networks","product":"SWM","defaultStatus":"unaffected","versions":[{"version":"1.9","status":"affected","lessThanOrEqual":"1.10","versionType":"SWM"}]},{"vendor":"Teltonika Networks","product":"TSW","defaultStatus":"unaffected","versions":[{"version":"1.9","status":"affected","lessThanOrEqual":"1.10","versionType":"TSW"}]}],"references":[{"url":"https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"CRITICAL","baseScore":9.4,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE‑863: Incorrect Authorization"}]}],"providerMetadata":{"shortName":"tlt_net","orgId":"001d69cf-3fc9-4203-93fb-9865b54e05b2","dateUpdated":"2026-10-30T08:01:55.034Z"},"impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-30T16:57:34.390915Z","id":"CVE-2026-82104","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","type":"CWE","lang":"en","description":"CWE-306 Missing Authentication for Critical Function"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-30T16:57:57.063Z"}}]}}}