CVE-2026-16455CWE-93

CVE-2026-16455

published August 13, 2026

CVSS
6.9
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to unsafe calls to an execl function.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Weakness
CWE-93 · Improper Neutralization of CRLF Sequences ('CRLF Injection')
Published
2026-08-13T15:17Z
References (1)
https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-16455++ · 001d69cf-3fc9-4203-93fb-9865b54e05b2
EPSS history
Timeline
  • 13 AUG 10:48Z
    Local privilege escalation via improper input sanitization in execl() call
    cvelistv5