MikroTik RouterOS vulnerabilities
26 published CVEs name MikroTik RouterOS among the affected products; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 26
- Last 12 months
- 19
- Critical
- 5
- Known exploited
- 3
Critical 5High 12Medium 9Low 0Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20232
- 20241
- 20253
- 202619
Known exploitedNewest addition to KEV first
- CVE-2026-67279
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
Mikrotik · RouterOS
ExploitedMedium6.9 - CVE-2026-86060
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
Mikrotik · RouterOS
ExploitedCritical9.2 - CVE-2026-67277
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
Mikrotik · RouterOS
ExploitedHigh8.8
Newest CVEs
- CVE-2026-89035
MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
MikroTik · RouterOS
Critical9.1 - CVE-2026-112158
MikroTik RouterOS ipt_SAME.ko same_check integer overflow
MikroTik · RouterOS
High7.1 - CVE-2026-103903
MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation
MikroTik · RouterOS
High8.7 - CVE-2026-84411
MikroTik RouterOS Integer Underflow
MikroTik · RouterOS
Critical9.3 - CVE-2026-93345
MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI
MikroTik · RouterOS
High8.7 - CVE-2026-89028
MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX
MikroTik · RouterOS
High8.2 - CVE-2026-56719
MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX
MikroTik · RouterOS
Medium6.3 - CVE-2026-89021
MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction
MikroTik · RouterOS
Medium6.9 - CVE-2026-89020
MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path
MikroTik · RouterOS
Medium5.3 - CVE-2026-86060
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
Mikrotik · RouterOS
ExploitedCritical9.2