Skip to content
Threat Feed
Subscribe

Vendor

Teltonika

3 briefs RSS
high advisory

Command Injection in Teltonika RutOS via API Services

Teltonika RutOS 00.07.06.21 is vulnerable to post-authentication command injection via the ipsec.lua and openvpn.lua modules, allowing arbitrary root command execution.

RutOS remote-code-execution command-injection industrial-security
2t
high threat

Sandworm Targeted Polish Energy Facility via Private APN Pivot

In December 2025, the threat actor Sandworm exploited an internet-facing firewall and a misconfigured cellular router to pivot through a private APN into a Polish energy facility's OT network, resulting in industrial sabotage.

VPN and firewall +5 Sandworm +4
6t
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +51 campaign clickfix
1c 59i updated