MikroTik RouterOS
26 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-89035 | ≤ 7.23.6 ; 7.24.0 – 7.24.5 | MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-112158 | 6.0 ; 6.1 ; 6.2 ; … | MikroTik RouterOS ipt_SAME.ko same_check integer overflow | HIGH 7.1 | 0.3 % | ||
| CVE-2026-103903 | 7.0.0 – < 7.24.5 | MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation | HIGH 8.7 | 0.4 % | ||
| CVE-2026-84411 | < 7.24 | MikroTik RouterOS Integer Underflow | CRITICAL 9.3 | 0.9 % | ||
| CVE-2026-93345 | ≤ 7.24.2 | MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI | HIGH 8.7 | 0.5 % | ||
| CVE-2026-89028 | ≤ 6.49.18 ; 7.0.0 – 7.11.2 | MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX | HIGH 8.2 | 0.6 % | ||
| CVE-2026-56719 | ≤ 6.49.18 ; 7.0.0 – 7.11.2 | MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX | MEDIUM 6.3 | 0.4 % | ||
| CVE-2026-89021 | < 7.24.2 | MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-89020 | < 7.23.4 ; 7.24.0 – < 7.24.2 | MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path | MEDIUM 5.3 | 0.5 % | ||
| CVE-2026-86060 | 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS | CRITICAL 9.2 | 6.4 % | KEV | |
| CVE-2026-67281 | 7.24 – < 7.24.2 ; 7.20 – < 7.23.4 | Unauthenticated file read in Mikrotik RouterOS | HIGH 8.7 | 0.7 % | ||
| CVE-2026-67279 | 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS | MEDIUM 6.9 | 2.3 % | KEV | |
| CVE-2026-67278 | 7.24 – < 7.24.3 ; 7.0.0 – < 7.23.6 | TLS server impersonation possible in Mikrotik RouterOS | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-67277 | 7.24 – < 7.24.2 ; 7.0.0 – < 7.23.4 ; 6.0.0 – < 6.49.21 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service | HIGH 8.8 | 1.6 % | KEV | |
| CVE-2026-67276 | 7.24 – < 7.24.2 ; 7.9 – < 7.23.4 | SSH user impersonation possible in Mikrotik RouterOS | CRITICAL 9.2 | 8.9 % | ||
| CVE-2026-14227 | All versions | Insufficient session expiration in MikroTik RouterOS | MEDIUM 6.9 | 0.4 % | ||
| CVE-2026-16347 | All versions | Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router | HIGH 8.7 | 0.4 % | ||
| CVE-2025-42611 | ≤ 7.20.x | Improper certificate validation in multiple RouterOS services | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-7668 | 6.49.8 | MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds | MEDIUM 6.9 | 0.3 % | ||
| CVE-2025-10948 | 7 | MikroTik RouterOS libjson.so print parse_json_element buffer overflow | HIGH 8.7 | 1.0 % | ||
| CVE-2025-6563 | < 7.19.2 | Cross-site scripting via dst parameter in RouterOS WiFi hotspot | MEDIUM 4.8 | 0.7 % | ||
| CVE-2025-6443 | 7.15.3, 7.16.2 | Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2023-32154 | 6.49.7 Stable | Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-30800 | 6.49.9 ; 6.48.8 | MikroTik RouterOS Web Interface Heap Corruption | HIGH 7.5 | 1.7 % | ||
| CVE-2023-30799 | < 6.49.7 ; ≤ 6.48.6 | MikroTik RouterOS Administrator Privilege Escalation | CRITICAL 9.1 | 1.4 % | ||
| CVE-2019-3943 | Stable 6.43.12 and below ; Long-term 6.42.12 and below ; Testing 6.44beta75 and below | MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an auth | HIGH 8.1 | 3.7 % |