MikroTik

Vulnerability activity for MikroTik: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 1
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 4
Critical (CVSS 9+): 1
Exploited (CISA KEV): 3
With exploit code: 1

Last 365 days

CVEs: 4
Critical (CVSS 9+): 1
Exploited (CISA KEV): 3
With exploit code: 1

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

6.9MediumSep 25, 2026MikroTik RouterOSCVE-2026-67279Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.Added to KEV Sep 25, 2026Exploited1% likely
8.8HighSep 10, 2026MikroTik RouterOS Auth bypass / access controlCVE-2026-67277MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.Added to KEV Sep 10, 2026Exploited1.6% likely
9.2CriticalSep 10, 2026MikroTik RouterOS Code / command injectionCVE-2026-86060MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.Added to KEV Sep 10, 2026Exploited6.4% likelyExploit codeExploit-DB
9.8CriticalMar 19, 2018MikroTik RouterOS Memory corruptionCVE-2018-7445In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.Added to KEV Sep 8, 2022 · 1,633 days after publicationExploited66% likelyExploit codeExploit-DB
9.1CriticalAug 2, 2018MikroTik RouterOS Path traversal / file handlingCVE-2018-14847MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.Added to KEV Dec 1, 2021 · 1,217 days after publicationExploited96% likelyExploit codeExploit-DB · MetasploitDetection

Recent

7.4HighOct 21, 2026MikroTik RouterOSCVE-2026-89035MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts without incorporating channel-specific or session-specific input, and the user service validates tokens against the login store without verifying channel context, enabling stolen tokens to grant persistent a
6.9MediumSep 25, 2026MikroTik RouterOSCVE-2026-67279Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.Exploited1% likely
9.2CriticalSep 10, 2026MikroTik RouterOS Code / command injectionCVE-2026-86060MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.Exploited6.4% likelyExploit codeExploit-DB
8.8HighSep 10, 2026MikroTik RouterOS Auth bypass / access controlCVE-2026-67277MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.Exploited1.6% likely
9.8CriticalMar 19, 2018MikroTik RouterOS Memory corruptionCVE-2018-7445In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.Exploited66% likelyExploit codeExploit-DB
9.1CriticalAug 2, 2018MikroTik RouterOS Path traversal / file handlingCVE-2018-14847MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.Exploited96% likelyExploit codeExploit-DB · MetasploitDetection

See every MikroTik entry on the dashboard.