TELTONIKA NETWORKING DEVICES
Schwachstellenberichte
Jedes Gerät, das mit dem Internet verbunden ist, kann Opfer von Cyberangriffen werden. Hier finden Sie alle Informationen über bestehende oder potenzielle Sicherheitsschwachstellen im Zusammenhang mit unseren Konnektivitätsprodukten.
Security vulnerability CVE-2026-82104
30.10.26
We have disclosed a critical security vulnerability (CVE-2026-82104) affecting devices running RutOS versions 7.22–7.24.2 and TswOS versions 1.9–1.10. The vulnerability could allow unauthenticated attackers to bypass security checks through the HTTPS port and potentially execute arbitrary commands.
The issue has been resolved in RutOS 7.24.3 and TswOS 1.10.1. We strongly recommend updating affected devices to these or later versions as soon as possible.
php2shell vulnerability
22.10.26
We are aware of the critical PHP vulnerability chain known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which was partially disclosed on October 20, 2026, with emergency patches released on October 21, 2026. Security patches released by the PHP project were applied to all of our RMS PHP environments as soon as they became available from the maintainers. No evidence of exploitation or compromise has been identified across any of our systems.
2026 RutOS and RMS third-party penetration testing
27.4.26
In collaboration with third-party penetration testing service providers, we have undergone security testing for our RutOS platform based RUTX10 device and Remote Management System. You can learn more about these tests here: RutOS - https://wiki.teltonika-networks.com/view/RUTX10_Device_security
Teltonika Networks has been certified with "IEC 62443-4-1" standard
30.3.26
Teltonika Networks has been certified with the "IEC 62443-4-1:2018 Secure product development lifecycle requirements" standard. You can find the certificate here: https://isasecure.org/end-users/iec-62443-4-1-certified-development-organizations
Title
Beschreibung
Title and description
- Seite 1
NEWS & ARTICLES
Secure Software Development Lifecycle
Ensuring the security of our products and services is a top priority at Teltonika. They are designed, developed, and rigorously tested with security and privacy in mind throughout the software development lifecycle of each release.
In addition to performing vulnerability management, reviewing vulnerability reports, routine monitoring of new vulnerabilities, and handling vulnerability remediation, Teltonika’s core Secure Software Development Lifecycle (SSDL) consists of the following phases:
Training
As a pre-requirement of this lifecycle, Teltonika’s security team drafts training materials and developer test on a yearly basis.
Requirements
Baseline security and privacy requirements for the upcoming release are drafted and communicated internally.
DESIGN
Software design reviews are conducted with the goals of understanding the upcoming release, drafting.
Implementation
Static code scanning tools are maintained and code is reviewed.
Verification
Comprehensive fuzzing, penetration, and final security tests are performed.
Release
Documents are finalised, archived, and taken into account for the following cycle.
