MikroTik

Products

Exploited and recent CVEs

• CVE-2026-86060 Critical 9.2 Exploited SSH session privilege manipulation via a crafted username in Mikrotik RouterOS 6.4%
• CVE-2026-67279 Medium 6.9 Exploited SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS 2.3%
• CVE-2026-67277 High 8.8 Exploited Kernel memory disclosure and denial of service in MikroTik RouterOS btest service 1.6%
• CVE-2026-89035 High 7.4 MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass 0.3%
• CVE-2026-112158 Medium 6.5 MikroTik RouterOS ipt_SAME.ko same_check integer overflow 0.3%
• CVE-2026-103903 High 8.8 MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation 0.4%
• CVE-2026-84411 Critical 9.8 MikroTik RouterOS Integer Underflow 0.9%
• CVE-2026-93345 High 7.5 MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI 0.5%
• CVE-2026-89028 High 7.5 MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX 0.6%
• CVE-2026-56719 Medium 6.5 MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX 0.4%
• CVE-2026-89021 Medium 6.9 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction 0.4%
• CVE-2026-89020 Medium 4.3 MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path 0.5%
• CVE-2026-67281 High 8.7 Unauthenticated file read in Mikrotik RouterOS 0.7%
• CVE-2026-67278 Medium 6.3 TLS server impersonation possible in Mikrotik RouterOS 0.3%
• CVE-2026-67276 Critical 9.2 SSH user impersonation possible in Mikrotik RouterOS 8.9%
• CVE-2026-14227 Medium 4.9 Insufficient session expiration in MikroTik RouterOS 0.4%
• CVE-2026-16347 High 8.8 Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router 0.4%
• CVE-2026-16347 High 8.8 Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router 0.4%
• CVE-2025-42611 Medium 6.5 Improper certificate validation in multiple RouterOS services 0.2%
• CVE-2026-7668 High 7.3 MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds 0.3%
• CVE-2025-10948 High 8.8 MikroTik RouterOS libjson.so print parse_json_element buffer overflow 1.0%
• CVE-2025-6563 Medium 4.8 Cross-site scripting via dst parameter in RouterOS WiFi hotspot 0.7%
• CVE-2025-6443 High 7.2 Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability 0.6%
• CVE-2023-32154 High 7.5 Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability 0.6%
• CVE-2024-2169 High 7.5 Implementations of UDP application protocols are susceptible to network loops and denial of service 5.4%
• CVE-2023-30800 High 7.5 MikroTik RouterOS Web Interface Heap Corruption 1.7%
• CVE-2023-30799 Critical 9.1 MikroTik RouterOS Administrator Privilege Escalation 1.4%