CVE-2026-18368
MediumCVSS 6.0Summary
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.
Risk Assessment
The attack could cause device or service unavailability, potentially disrupting industrial or network operations where the device is used.
Recommendation
Upgrade RUTOS firmware to the latest version containing the fix and restrict access to the modbusgwd service to trusted networks only.
Original NVD description (English source)
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service.