{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82104", "assignerOrgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "state": "PUBLISHED", "assignerShortName": "tlt_net", "dateReserved": "2026-08-28T05:06:54.296Z", "datePublished": "2026-10-30T08:01:55.034Z", "dateUpdated": "2026-10-30T16:57:57.063Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "shortName": "tlt_net", "dateUpdated": "2026-10-30T08:01:55.034Z"}, "title": "API permission bypass via logic bug", "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE\u2011863: Incorrect Authorization"}]}], "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "affected": [{"vendor": "Teltonika Networks", "product": "RUT", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUT"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTX", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTX"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTM", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTC", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTC"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "ATRM", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "ATRM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "TAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "CAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "CAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "OXA", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "OXA"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "DAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "DAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TRB", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "TRB"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "OTD", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "OTD"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "EBG", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "EBG"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "SWM", "versions": [{"status": "affected", "version": "1.9", "lessThanOrEqual": "1.10", "versionType": "SWM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TSW", "versions": [{"status": "affected", "version": "1.9", "lessThanOrEqual": "1.10", "versionType": "TSW"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.</p><p>This issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.</p>"}]}], "references": [{"url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.4, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-306", "lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T16:57:34.390915Z", "id": "CVE-2026-82104", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T16:57:57.063Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82104", "assignerOrgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "state": "PUBLISHED", "assignerShortName": "tlt_net", "dateReserved": "2026-08-28T05:06:54.296Z", "datePublished": "2026-10-30T08:01:55.034Z", "dateUpdated": "2026-10-30T16:57:57.063Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "shortName": "tlt_net", "dateUpdated": "2026-10-30T08:01:55.034Z"}, "title": "API permission bypass via logic bug", "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE\u2011863: Incorrect Authorization"}]}], "impacts": [{"capecId": "CAPEC-1", "descriptions": [{"lang": "en", "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}], "affected": [{"vendor": "Teltonika Networks", "product": "RUT", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUT"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTX", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTX"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTM", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "RUTC", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "RUTC"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "ATRM", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "ATRM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "TAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "CAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "CAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "OXA", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "OXA"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "DAP", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "DAP"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TRB", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "TRB"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "OTD", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "OTD"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "EBG", "versions": [{"status": "affected", "version": "7.22", "lessThanOrEqual": "7.24.2", "versionType": "EBG"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "SWM", "versions": [{"status": "affected", "version": "1.9", "lessThanOrEqual": "1.10", "versionType": "SWM"}], "defaultStatus": "unaffected"}, {"vendor": "Teltonika Networks", "product": "TSW", "versions": [{"status": "affected", "version": "1.9", "lessThanOrEqual": "1.10", "versionType": "TSW"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.</p><p>This issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.</p>"}]}], "references": [{"url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "CRITICAL", "baseScore": 9.4, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-82104", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-30T16:57:34.390915Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T16:57:51.501Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "RUT", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "RUT"}]}, {"defaultStatus": "unaffected", "product": "RUTX", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "RUTX"}]}, {"defaultStatus": "unaffected", "product": "RUTM", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "RUTM"}]}, {"defaultStatus": "unaffected", "product": "RUTC", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "RUTC"}]}, {"defaultStatus": "unaffected", "product": "ATRM", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "ATRM"}]}, {"defaultStatus": "unaffected", "product": "TAP", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "TAP"}]}, {"defaultStatus": "unaffected", "product": "CAP", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "CAP"}]}, {"defaultStatus": "unaffected", "product": "OXA", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "OXA"}]}, {"defaultStatus": "unaffected", "product": "DAP", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "DAP"}]}, {"defaultStatus": "unaffected", "product": "TRB", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "TRB"}]}, {"defaultStatus": "unaffected", "product": "OTD", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "OTD"}]}, {"defaultStatus": "unaffected", "product": "EBG", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "7.24.2", "status": "affected", "version": "7.22", "versionType": "EBG"}]}, {"defaultStatus": "unaffected", "product": "SWM", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "1.10", "status": "affected", "version": "1.9", "versionType": "SWM"}]}, {"defaultStatus": "unaffected", "product": "TSW", "vendor": "Teltonika Networks", "versions": [{"lessThanOrEqual": "1.10", "status": "affected", "version": "1.9", "versionType": "TSW"}]}], "source": "001d69cf-3fc9-4203-93fb-9865b54e05b2"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\n\n\n\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10."}], "id": "CVE-2026-82104", "lastModified": "2026-10-30T17:45:50.283", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.4, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-82104", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T16:57:34.390915Z", "version": "2.0.3"}}]}, "published": "2026-10-30T08:17:00.240", "references": [{"source": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "url": "https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104"}], "sourceIdentifier": "001d69cf-3fc9-4203-93fb-9865b54e05b2", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"created": "2026-10-30T09:30:11.278806+00:00", "updated": "2026-10-30T19:30:11.349755+00:00", "vendors": []}