https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:12:49.563718+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-8914 CVE-2026-8914 — Command injection in Profile change function 2026-10-07T08:12:49.581152+00:00

Affected: Teltonika Networks RUTOS, Teltonika Networks TSWOS

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.