CVE-2026-82104
Received Received - Intake

Unauthenticated LUA Function Call Leading to OS Command Execution in Teltonika RUTOS and TSWOS

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Teltonika Networks

Description
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution. This issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-82104
EUVD
EUVD-2026-113748

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated user to directly call LUA functions on Teltonika Networks RUTOS and TSWOS devices, bypassing normal API validations. This can lead to arbitrary OS command execution due to improper request flows.

Detection Guidance

To detect this vulnerability, check if your Teltonika device is running affected firmware versions (RUTOS 7.22-7.24.2 or TSWOS 1.9-1.10). Inspect network traffic for unauthorized LUA function calls or unexpected OS command execution attempts. Monitor logs for unusual API requests bypassing normal validation flows.

Impact Analysis

An attacker could exploit this to execute malicious commands on affected devices, potentially gaining control over the system, stealing data, or disrupting network operations.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements such as GDPR (data protection) and HIPAA (health data security), potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Immediately update affected Teltonika Networks devices to versions beyond the vulnerable range (RUTOS 7.24.2+ or TSWOS 1.10+). Disable unauthenticated LUA function calls if possible and restrict network access to device management interfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82104. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart