Skip to contentMikrotik Routeros vulnerabilities
- mikrotik routerosMikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication BypassCVE-2026-890359.1 Critical
- mikrotik routerosMikroTik RouterOS ipt_SAME.ko same_check integer overflowCVE-2026-1121587.1 High
- mikrotik routerosMikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalationCVE-2026-1039038.7 High
- mikrotik routerosMikroTik RouterOS Integer UnderflowCVE-2026-84411Public exploit9.3 Critical
- mikrotik routerosMikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRICVE-2026-933458.7 High
- mikrotik routerosMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXCVE-2026-890288.2 High
- mikrotik routerosMikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXCVE-2026-567196.3 Medium
- mikrotik routerosMikroTik RouterOS Path Traversal via Container OCI/tar Image ExtractionCVE-2026-890216.9 Medium
- mikrotik routerosMikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege EscalationCVE-2026-89020Public exploit8.7 High
- mikrotik routerosSSH session privilege manipulation via a crafted username in Mikrotik RouterOSCVE-2026-86060In KEVPublic exploit9.2 Critical
- mikrotik routerosUnauthenticated file read in Mikrotik RouterOSCVE-2026-67281Public exploit8.7 High
- mikrotik routerosSSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSCVE-2026-67279In KEVPublic exploitFix available6.9 Medium
- mikrotik routerosTLS server impersonation possible in Mikrotik RouterOSCVE-2026-672786.3 Medium
- mikrotik routerosKernel memory disclosure and denial of service in MikroTik RouterOS btest serviceCVE-2026-67277In KEV8.8 High
- mikrotik routerosSSH user impersonation possible in Mikrotik RouterOSCVE-2026-67276Known exploitedPublic exploit9.2 Critical
- mikrotik routerosInsufficient session expiration in MikroTik RouterOSCVE-2026-142276.9 Medium
- mikrotik cloud hosted router, routeros +1 moreImproper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted RouterCVE-2026-163478.7 High
- mikrotik routerosImproper certificate validation in multiple RouterOS servicesCVE-2025-426116.5 Medium
- mikrotik routerosMikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-boundsCVE-2026-76686.9 Medium
- mikrotik routerosMikroTik RouterOS libjson.so print parse_json_element buffer overflowCVE-2025-109488.7 High
- mikrotik routerosCross-site scripting via dst parameter in RouterOS WiFi hotspotCVE-2025-6563Public exploit4.8 Medium
- mikrotik routerosMikrotik RouterOS VXLAN Source IP Improper Access Control VulnerabilityCVE-2025-64437.2 High
- mikrotik routerosMikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote,...CVE-2024-549527.5 High
- mikrotik routerosAn issue was discovered in the Winbox service of MikroTik RouterOS v6.43 through v7.16.1. A...CVE-2024-54772Public exploit5.4 Medium
- mikrotik routerosMikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2023-321547.5 High
- dproxy-nexgen, microsoft wds, mikrotik routeros-tftp +1 more +3 moreImplementations of UDP application protocols are susceptible to network loops and denial of serviceCVE-2024-2169Public exploitFix available7.5 High
- mikrotik routerosMikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in...CVE-2023-415705.3 Medium
- mikrotik routerosMikroTik RouterOS Web Interface Heap CorruptionCVE-2023-30800Public exploit7.5 High
- mikrotik routerosMikroTik RouterOS Administrator Privilege EscalationCVE-2023-30799Public exploit9.1 Critical
- mikrotik routerosAn issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of...CVE-2020-200217.5 High
- mikrotik routerosAn issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial...CVE-2023-240947.5 High
- microtik routerosMikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp...CVE-2022-453156.4 Medium
- mikrotik routerosMikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the...CVE-2022-453138.8 High
- mikrotik routerosThe Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and...CVE-2017-201499.8 Critical
- mikrotik routerosMikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the...CVE-2022-365226.5 Medium
- mikrotik routerosThe container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points...CVE-2022-349609.8 Critical
- mikrotik routerosMikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp...CVE-2021-366136.5 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the...CVE-2021-366146.5 Medium
- mikrotik routerosIn the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based...CVE-2021-41987EPSS 16.2%8.1 High
- mikrotik routerosA buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of...CVE-2020-228457.5 High
- mikrotik routerosA buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of...CVE-2020-228447.5 High
- mikrotik routerosMikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource...CVE-2020-202216.5 Medium
- mikrotik routerosMikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in...CVE-2020-202626.5 Medium
- mikrotik routerosMikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the ...CVE-2020-202196.5 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the...CVE-2020-202486.5 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the...CVE-2020-202496.5 Medium
- mikrotik routerosMikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the...CVE-2020-202306.5 Medium
- mikrotik routerosMikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in...CVE-2020-202316.5 Medium
- mikrotik routerosMikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in...CVE-2020-202526.5 Medium
- mikrotik routerosMikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in...CVE-2020-202506.5 Medium
- Show olderLoading…