Mikrotik vulnerabilities

Products

• Routeros 103
• Winbox 3
• Router Firmware 2

Newest

• mikrotik routeros MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass CVE-2026-89035 9.1 CriticalOctober 21, 2026
• mikrotik routeros MikroTik RouterOS ipt_SAME.ko same_check integer overflow CVE-2026-112158 7.1 HighOctober 19, 2026
• mikrotik routeros MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation CVE-2026-103903 8.7 HighOctober 12, 2026
• mikrotik routeros MikroTik RouterOS Integer Underflow CVE-2026-84411 Public exploit 9.3 CriticalOctober 2, 2026
• mikrotik routeros MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI CVE-2026-93345 8.7 HighSeptember 22, 2026
• mikrotik routeros MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX CVE-2026-89028 8.2 HighSeptember 16, 2026
• mikrotik routeros MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX CVE-2026-56719 6.3 MediumSeptember 16, 2026
• mikrotik routeros MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction CVE-2026-89021 6.9 MediumSeptember 14, 2026
• mikrotik routeros MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation CVE-2026-89020 Public exploit 8.7 HighSeptember 14, 2026
• mikrotik routeros SSH session privilege manipulation via a crafted username in Mikrotik RouterOS CVE-2026-86060 In KEVPublic exploit 9.2 CriticalSeptember 5, 2026
• mikrotik routeros Unauthenticated file read in Mikrotik RouterOS CVE-2026-67281 Public exploit 8.7 HighSeptember 5, 2026
• mikrotik routeros SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS CVE-2026-67279 In KEVPublic exploitFix available 6.9 MediumSeptember 5, 2026
• mikrotik routeros TLS server impersonation possible in Mikrotik RouterOS CVE-2026-67278 6.3 MediumSeptember 5, 2026
• mikrotik routeros Kernel memory disclosure and denial of service in MikroTik RouterOS btest service CVE-2026-67277 In KEV 8.8 HighSeptember 5, 2026
• mikrotik routeros SSH user impersonation possible in Mikrotik RouterOS CVE-2026-67276 Known exploitedPublic exploit 9.2 CriticalSeptember 5, 2026
• mikrotik routeros Insufficient session expiration in MikroTik RouterOS CVE-2026-14227 6.9 MediumJuly 30, 2026
• mikrotik cloud hosted router, routeros +1 more Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router CVE-2026-16347 8.7 HighJuly 28, 2026
• mikrotik routeros Improper certificate validation in multiple RouterOS services CVE-2025-42611 6.5 MediumMay 5, 2026
• mikrotik routeros MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds CVE-2026-7668 6.9 MediumMay 2, 2026
• mikrotik routeros MikroTik RouterOS libjson.so print parse_json_element buffer overflow CVE-2025-10948 8.7 HighSeptember 25, 2025
• mikrotik routeros Cross-site scripting via dst parameter in RouterOS WiFi hotspot CVE-2025-6563 Public exploit 4.8 MediumJuly 3, 2025
• mikrotik routeros Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability CVE-2025-6443 7.2 HighJune 25, 2025
• mikrotik routeros MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote,... CVE-2024-54952 7.5 HighMay 29, 2025
• mikrotik routeros An issue was discovered in the Winbox service of MikroTik RouterOS v6.43 through v7.16.1. A... CVE-2024-54772 Public exploit 5.4 MediumFebruary 11, 2025
• mikrotik routeros Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2023-32154 7.5 HighMay 3, 2024
• dproxy-nexgen, microsoft wds, mikrotik routeros-tftp +1 more +3 more Implementations of UDP application protocols are susceptible to network loops and denial of service CVE-2024-2169 Public exploitFix available 7.5 HighMarch 19, 2024
• mikrotik routeros MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in... CVE-2023-41570 5.3 MediumNovember 14, 2023
• mikrotik routeros MikroTik RouterOS Web Interface Heap Corruption CVE-2023-30800 Public exploit 7.5 HighSeptember 7, 2023
• mikrotik routeros MikroTik RouterOS Administrator Privilege Escalation CVE-2023-30799 Public exploit 9.1 CriticalJuly 19, 2023
• mikrotik routeros An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of... CVE-2020-20021 7.5 HighJuly 12, 2023
• mikrotik routeros An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial... CVE-2023-24094 7.5 HighMarch 27, 2023
• microtik routeros Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp... CVE-2022-45315 6.4 MediumDecember 5, 2022
• mikrotik routeros Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the... CVE-2022-45313 8.8 HighDecember 5, 2022
• mikrotik routeros The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and... CVE-2017-20149 9.8 CriticalOctober 15, 2022
• mikrotik routeros Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the... CVE-2022-36522 6.5 MediumAugust 26, 2022
• mikrotik routeros The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points... CVE-2022-34960 9.8 CriticalAugust 25, 2022
• mikrotik routeros Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp... CVE-2021-36613 6.5 MediumMay 11, 2022
• mikrotik routeros Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the... CVE-2021-36614 6.5 MediumMay 11, 2022
• mikrotik routeros In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based... CVE-2021-41987 EPSS 16.2% 8.1 HighMarch 16, 2022
• mikrotik routeros A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of... CVE-2020-22845 7.5 HighFebruary 28, 2022
• mikrotik routeros A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of... CVE-2020-22844 7.5 HighFebruary 28, 2022
• mikrotik routeros Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource... CVE-2020-20221 6.5 MediumJuly 21, 2021
• mikrotik routeros Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in... CVE-2020-20262 6.5 MediumJuly 21, 2021
• mikrotik routeros Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ... CVE-2020-20219 6.5 MediumJuly 21, 2021
• mikrotik routeros Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the... CVE-2020-20248 6.5 MediumJuly 19, 2021
• mikrotik routeros Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the... CVE-2020-20249 6.5 MediumJuly 19, 2021
• mikrotik routeros Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the... CVE-2020-20230 6.5 MediumJuly 19, 2021
• mikrotik routeros Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in... CVE-2020-20231 6.5 MediumJuly 14, 2021
• mikrotik routeros Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in... CVE-2020-20252 6.5 MediumJuly 13, 2021
• mikrotik routeros Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in... CVE-2020-20250 6.5 MediumJuly 13, 2021
• Show olderLoading…