Is CVE-2026-27867 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-27867 being exploited in the wild.

How severe is CVE-2026-27867?

Informational severity, published 25 September 2026.

Which products and versions are affected?

Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.06.00.02.

Is there a fix for CVE-2026-27867?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-27867 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-27867?

Check whether you run Teldat Regesta Smart HD-PLC - TLDPH16D2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-27867: Teldat Regesta Smart HD-PLC XSS in upgrade interface

CVE-2026-27867 · Severity: info · Published 2026-09-25

Teldat Regesta Smart HD-PLC is a power line communication device used in utility and infrastructure networks. An authenticated attacker with network access can inject malicious scripts through the firmware upgrade interface, potentially allowing them to manipulate the device's configuration or steal credentials from administrators.

Technologies: Teldat Regesta Smart HD-PLC - TLDPH16D2. Vendors: Teldat.

Quick answers

Is CVE-2026-27867 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-27867 being exploited in the wild.
How severe is CVE-2026-27867?: Informational severity, published 25 September 2026.
Which products and versions are affected?: Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.06.00.02.
Is there a fix for CVE-2026-27867?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-27867 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-27867?: Check whether you run Teldat Regesta Smart HD-PLC - TLDPH16D2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Cross-Site Scripting (XSS) vulnerability exists in the /upgrade/index.html endpoint of Regesta Smart HD-PLC firmware, where the "cmdcookie" parameter is not properly sanitized. An attacker with network access and valid registration can inject arbitrary JavaScript that executes in the context of an administrator's browser session.

Affected products

Teldat Regesta Smart HD-PLC TLDPH16D2 11.02.06.00.02

Timeline

2026-09-25: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.