CVE-2026-18368: Teltonika Networks Rutos

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.

Affected products

• Teltonika Networks Rutos: from 7.12.0, up to and including 7.24.1

Published 2026-08-13. Last modified 2026-09-08.