CVE-2026-27868

🗓️ 17 Jun 2026 08:13:36Reported by HackRTUType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

CVE-2026-27868 enables information disclosure on Regesta Smart HD-PLC by querying version over the network without registration.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2026-27868 PUBLICATION OF SENSITIVE INFORMATION ON REGESTA SMART HD-PLC OF TELDAT	17 Jun 202608:13	–	cvelist
EUVD	EUVD-2026-37576	17 Jun 202618:35	–	euvd
NVD	CVE-2026-27868	17 Jun 202613:20	–	nvd
Positive Technologies	PT-2026-50256	17 Jun 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-27868 PUBLICATION OF SENSITIVE INFORMATION ON REGESTA SMART HD-PLC OF TELDAT	17 Jun 202608:13	–	vulnrichment

CNA

Node

teldat regesta_smart_hd-plc_-_tldph16d2Match11.02.05.10.02

teldat regesta_smart_hd-plc_-_tldph16d2Match11.02.06.00.02

[
  {
    "vendor": "Teldat",
    "product": "Regesta Smart HD-PLC - TLDPH16D2",
    "versions": [
      {
        "status": "affected",
        "version": "11.02.05.10.02"
      },
      {
        "status": "unaffected",
        "version": "11.02.06.00.02"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
teldat	www.teldat.com/es/
support	www.support.teldat.com/portal/supportcontent
hackrtu	www.hackrtu.com/blog/CNA-CVE-2026-27868/
support	www.support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf
hackrtu	www.hackrtu.com/blog/CNA-HRTU-0003/

Parameter	Position	Path	Description	CWE
cmd	query param	/upgrade/query.php?cmd=p+3&3Bversion	Information disclosure via crafted query parameters in upgrade/query.php, allowing privilege information retrieval.	CWE-201
3Bversion	query param	/upgrade/query.php?cmd=p+3&3Bversion	Information disclosure via crafted query parameters in upgrade/query.php, allowing privilege information retrieval.	CWE-201

01 Jul 2026 12:16Current

5.3Medium risk

Vulners AI Score5.3

CVSS 46.9

EPSS0.00394

SSVC

CWE-201