Is CVE-2026-27868 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-27868 being exploited in the wild.

How severe is CVE-2026-27868?

Informational severity, with a CVSS score of 6.9, published 17 June 2026.

Which products and versions are affected?

Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02.

Is there a fix for CVE-2026-27868?

A patch was published on 2026-06-17: Firmware version 11.02.06.00.02 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-27868 attacked?

It is attacked over the network.

Am I affected by CVE-2026-27868?

Check whether you run Teldat Regesta Smart HD-PLC - TLDPH16D2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-27868: Teldat Regesta Smart HD-PLC information disclosure in query.php

CVE-2026-27868 · Severity: info · CVSS 6.9 · Published 2026-06-17

A vulnerability in Teldat's Regesta Smart industrial routers allows unauthorized individuals to access sensitive system information over the network. By sending a specific command to the device's web interface, an attacker can view version details and other privileged data without needing to log in. This could allow an attacker to better plan further attacks or gain insights into the organization's industrial infrastructure.

Technologies: Teldat Regesta Smart HD-PLC - TLDPH16D2. Vendors: Teldat.

Quick answers

Is CVE-2026-27868 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-27868 being exploited in the wild.
How severe is CVE-2026-27868?: Informational severity, with a CVSS score of 6.9, published 17 June 2026.
Which products and versions are affected?: Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02.
Is there a fix for CVE-2026-27868?: A patch was published on 2026-06-17: Firmware version 11.02.06.00.02 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-27868 attacked?: It is attacked over the network.
Am I affected by CVE-2026-27868?: Check whether you run Teldat Regesta Smart HD-PLC - TLDPH16D2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An information disclosure vulnerability exists in the Teldat Regesta Smart HD-PLC (TLDPH16D2) industrial router. The flaw is located in the '/upgrade/query.php' component, which fails to properly restrict access to sensitive system commands. A remote, unauthenticated attacker can exploit this by sending a crafted HTTP request using the 'Version' command (e.g., '/upgrade/query.php?cmd=p+3&3Bversion'). Successful exploitation allows the attacker to obtain privileged system information, categorized under CWE-201 (Insertion of Sensitive Information Into Sent Data). The vendor has released firmware version 11.02.06.00.02 to address this issue.

Affected products

Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02

Timeline

2026-06-17: advisory: Initial disclosure by HackRTU CNA
2026-06-17: patched: Firmware version 11.02.06.00.02 released to address the issue

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.