{"metadata": {"vulnerability": "CVE-2026-82104", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-08-28T05:06:54.296Z", "date_only": false, "value": "2026-08-28T05:06:54.296Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-30T08:01:55.034Z", "date_only": false, "value": "2026-10-30T08:01:55.034Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T08:01:55.034Z", "date_only": false, "value": "2026-10-30T08:01:55.034Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / tlt_net", "record": "CVE-2026-82104", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T08:11:08.702Z", "date_only": false, "value": "2026-10-30T08:11:08.702709Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117528845886263626", "record": "CVE-2026-82104", "field": "creation_timestamp", "uuid": "ee40bf08-0fe5-4118-ac9c-f43929013dc8", "content": "CVE-2026-82104 API permission bypass via logic bug In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be called under normal API requests. Due to those requests not following proper flows, this could lead to OS command execution.\nThis issue affects RUT: from 7.22 through 7.24.2; RUTX: from 7.22 through 7.24.2; RUTM: from 7.22 through 7.24.2; RUTC: from 7.22 through 7.24.2; ATRM: from 7.22 through 7.24.2; TAP: from 7.22 through 7.24.2; CAP: from 7.22 through 7.24.2; OXA: from 7.22 through 7.24.2; DAP: from 7.22 through 7.24.2; TRB: from 7.22 through 7.24.2; OTD: from 7.22 through 7.24.2; EBG: from 7.22 through 7.24.2; SWM: from 1.9 through 1.10; TSW: from 1.9 through 1.10.\nhttps://www.cve.org/CVERecord?id=CVE-2026-82104https://www.teltonika-networks.com/support/security-centre?report=CVE-2026-82104#TeltonikaNetworks #RUT #RUTX #RUTM #RUTC #ATRM #TAP #CAP #OXA #DAP #TRB #OTD #EBG #SWM #TSW#CVE_2026_82104#bot", "url": "https://infosec.exchange/users/cve/statuses/117528845886263626"}, {"timestamp": "2026-10-30T08:17:00Z", "date_only": false, "value": "2026-10-30T08:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4V5H-X9V6-MWW6", "record": "GHSA-4V5H-X9V6-MWW6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-30T08:17:00.240Z", "date_only": false, "value": "2026-10-30T08:17:00.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82104", "record": "FKIE_CVE-2026-82104", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T08:50:04.428Z", "date_only": false, "value": "2026-10-30T08:50:04.428300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mz3fkxnqiw25", "record": "CVE-2026-82104", "field": "creation_timestamp", "uuid": "54a67ec2-c88e-4311-a5dd-3c4bcb2a691c", "content": "CVE-2026-82104 - rut\nSeveral Teltonika Networks router models (RUT, RUTX, RUTM, RUTC, ATRM and related firmware versions) let anyone call internal functions without logging in, which can lead to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rut #teltonikanetworks #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mz3fkxnqiw25"}, {"timestamp": "2026-10-30T09:00:33.366Z", "date_only": false, "value": "2026-10-30T09:00:33.366495Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117529040171271799", "record": "cve-2026-82104", "field": "creation_timestamp", "uuid": "de0f9ad3-820e-4c03-9786-7ff5739d5c0f", "content": "Teltonika RUT devices (RUTOS 7.22 \u2013 7.24.2, TSWOS 1.9 \u2013 1.10) face CRITICAL vuln: CVE-2026-82104. Unauthenticated attackers can execute OS commands via incorrect LUA authorization. Restrict access, monitor systems. Patch unconfirmed. https://radar.offseq.com/threat/cve-2026-82104-cwe863-incorrect-authorization-in-teltonika-networks-rut-fa6ae78ef5328d8c #OffSeq #Infosec #CVE #IoT", "url": "https://infosec.exchange/users/offseq/statuses/117529040171271799"}, {"timestamp": "2026-10-30T09:00:35.104Z", "date_only": false, "value": "2026-10-30T09:00:35.104573Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mz3g5qpjzx2q", "record": "cve-2026-82104", "field": "creation_timestamp", "uuid": "63782e9f-4128-41be-8edf-1d51b6f1f26c", "content": "Teltonika RUT & related devices face CRITICAL CVE-2026-82104 (CVSS 9.4): Unauthenticated OS command execution via LUA. Restrict access, monitor activity, check vendor for patches. https://radar.offseq.com/threat/cve-2026-82104-cwe863-incorrect-authorization-in-teltonika-networks-rut-fa6ae78ef5328...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mz3g5qpjzx2q"}, {"timestamp": "2026-10-30T09:31:25Z", "date_only": false, "value": "2026-10-30T09:31:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4V5H-X9V6-MWW6", "record": "GHSA-4V5H-X9V6-MWW6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-30T09:31:25Z", "date_only": false, "value": "2026-10-30T09:31:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4V5H-X9V6-MWW6", "record": "GHSA-4V5H-X9V6-MWW6", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-30T10:07:09.501Z", "date_only": false, "value": "2026-10-30T10:07:09.501140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mz3jusiuhf2w", "record": "CVE-2026-82104", "field": "creation_timestamp", "uuid": "aeff6e76-0245-4103-8660-6baa8d590cad", "content": "\ud83d\udea8 CVE-2026-82104 \u2014 CVSS 9.4 CRITICAL\n\nIn Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82104\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mz3jusiuhf2w"}, {"timestamp": "2026-10-30T10:30:31.469Z", "date_only": false, "value": "2026-10-30T10:30:31.469897Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117529393935038541", "record": "CVE-2026-82104", "field": "creation_timestamp", "uuid": "086c1e97-ab8e-4221-8cbf-ca2b32135d3f", "content": "CVE-2026-82104: Teltonika RUTOS (7.22 \u2013 7.24.2) & TSWOS (1.9 \u2013 1.10) have a CRITICAL flaw \u2014 unauthenticated users can execute OS commands via LUA API bypass. Restrict access & monitor devices. Patch status TBC. https://radar.offseq.com/threat/in-teltonika-networks-rutos-devices-running-versions-from-722-through-7242-and-tswos-devices-running-754a7a56d55cfce7 #OffSeq #Vuln #IoT #CVE202682104", "url": "https://infosec.exchange/users/offseq/statuses/117529393935038541"}, {"timestamp": "2026-10-30T12:55:41.335Z", "date_only": false, "value": "2026-10-30T12:55:41.335449Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3lgpbmqgsb7hc", "record": "CVE-2026-82104", "field": "creation_timestamp", "uuid": "2f4b6e4c-3f55-435c-8be2-fdbb8ee11c45", "content": "\ud83d\udea8 CVE-2026-82104\nAffected product: see description\nCVSS 9.4 / KEV: No\nTL;DR: In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulner\u2026\nhttps://cvesentinel.com/report/CVE-2026-82104\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3lgpbmqgsb7hc"}, {"timestamp": "2026-10-30T16:57:34.390Z", "date_only": false, "value": "2026-10-30T16:57:34.390915Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82104", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T16:57:34.390Z", "date_only": false, "value": "2026-10-30T16:57:34.390915Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82104", "record": "FKIE_CVE-2026-82104", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-30T16:57:57.063Z", "date_only": false, "value": "2026-10-30T16:57:57.063Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T16:57:57.063Z", "date_only": false, "value": "2026-10-30T16:57:57.063Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-82104", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T17:45:50.283Z", "date_only": false, "value": "2026-10-30T17:45:50.283", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-82104", "record": "FKIE_CVE-2026-82104", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T11:57:05.220Z", "anchors": {"origin": {"timestamp": "2026-10-30T08:01:55.034Z", "date_only": false, "value": "2026-10-30T08:01:55.034Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-30T08:01:55.034Z", "date_only": false, "value": "2026-10-30T08:01:55.034Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 446110.186, "hours": 123.9194961111111, "days": 5.163312337962963, "min_seconds": 446110.186, "max_seconds": 446110.186, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-30T08:01:55.034Z", "date_only": false, "value": "2026-10-30T08:01:55.034Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-82104", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T11:57:05.220Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}