# CVE-2026-27869: Teldat Regesta Smart HD-PLC Denial of Service in web interface

Source: https://junglewise.ai/threats/cve-2026-27869-teldat-regesta-smart-hd-plc-denial-of-service-in-web-interface  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-17. Updated: 2026-06-20  
License: CC BY 4.0 with a link back

CVE-2026-27869 · Severity: info · CVSS 6.9 · Published 2026-06-17

The Teldat Regesta Smart HD-PLC, an industrial router used in power line communications, is vulnerable to a network-based attack that can disable its management interface. By sending specifically crafted, slow network traffic, an attacker can overwhelm the device's web service without needing any login credentials. This results in a denial-of-service condition, preventing administrators from managing or monitoring the device remotely.

Vendors: [Teldat](https://junglewise.ai/threats/vendors/teldat).

## Quick answers

**Is CVE-2026-27869 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-27869 being exploited in the wild.

**How severe is CVE-2026-27869?** Informational severity, with a CVSS score of 6.9, published 17 June 2026.

**Which products and versions are affected?** Teldat Regesta Smart HD-PLC 11.02.05.10.02.

**Is there a fix for CVE-2026-27869?** A patch was published on 2026-06-17: Fixed in version 11.02.06.00.02 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-27869 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-27869?** Check whether you run Teldat Regesta Smart HD-PLC at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability in the HTTP web service of the Teldat Regesta Smart HD-PLC (specifically model TLDPH16D2) allows for a Denial of Service (DoS) via a Slowloris attack. The issue stems from improper allocation of resources or lack of throttling (CWE-770) when handling HTTP headers. An unauthenticated remote attacker can initiate multiple slow HTTP connections, exhausting the available connection pool and rendering the web interface unresponsive. The vulnerability is confirmed in firmware version 11.02.05.10.02 and is addressed in version 11.02.06.00.02.

## Affected products

- Teldat Regesta Smart HD-PLC - TLDPH16D2 11.02.05.10.02

## Timeline

- 2026-06-17: disclosed
- 2026-06-17: advisory
- 2026-06-17: patched: Fixed in version 11.02.06.00.02

## References

- [https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf](https://support.teldat.com/images/content/docs/Teldat_dm1087_regesta_smart_nessum_series_installation(1).pdf)
- [https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US](https://support.teldat.com/portal/supportcontent?page=cgs-customer-global-support&none=true&language=en-US)
- [https://www.hackrtu.com/blog/CNA-CVE-2026-27869/](https://www.hackrtu.com/blog/CNA-CVE-2026-27869/)
- [https://www.hackrtu.com/blog/CNA-HRTU-0002/](https://www.hackrtu.com/blog/CNA-HRTU-0002/)
- [https://www.teldat.com/es/](https://www.teldat.com/es/)