Vulnerability · Published Oct 19, 2026 · Assigned by VulDB

CVE-2026-112158MikroTik RouterOS ipt_SAME.ko same_check integer overflow

Medium 6.5

In plain English

A medium-severity integer overflow in RouterOS from MikroTik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 73.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.

Affected products (as reported)

Vendor	Product	Versions
MikroTik	RouterOS	6.06.16.26.36.46.56.66.7

Weakness: CWE-190, CWE-189 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:O/RC:C

References

VDB-422285 | MikroTik RouterOS ipt_SAME.ko same_check integer overflow vdb-entry, technical-description
VDB-422285 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-112158 | CVE Analysis and Report third-party-advisory
Submit #956852 | MikroTik RouterOS <= 7.20.x long-term channel (tested: 6.40.5, 6.44, 7.20.8); v6 line affected Integer Overflow third-party-advisory
https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md broken-link