SZB-c64df51200
Teltonika RUTOS vulnerability EUVD-2026-113748 lets unauthenticated users call LUA functions
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Teltonika
- Product
- RUTOS and TSWOS devices
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-113748 describes a flaw in Teltonika RUTOS 7.22 through 7.24.2 and TSWOS 1.9 through 1.10 that lets unauthenticated users call LUA functions directly. The entry is scored 9.4/10 (CVSS v3.1), and the item does not name a CVE ID.
If you use Teltonika
Check whether your Teltonika RUTOS or TSWOS devices run affected versions
Update to a fixed firmware release from Teltonika as soon as one is available
Restrict management interface access to trusted networks until patched
What the sources say 1
· Mastodon: “In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing...” Source