CVE-2026-8914 in RUTOS

الملخص

بحسب MITRE • 05/06/2026

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: Tlt Net
• حجز: 19/05/2026
• إفشاء: 05/06/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-368890
• CPE: جاهز
• CWE: CWE-95 (مؤكد)
• CVSS: 6.7 (VulDB)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-8914
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-8914
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-8914/