7.5
High
CVE-2023-30800 The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue
Description
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.
Affected products and versions
Other CVEs of RouterOS
The 26 CVEs of RouterOS →
CVE-2026-89035
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows…
9.1
Critical
CVE-2026-112158
A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8
7.1
High
CVE-2026-103903
An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote…
8.7
High
CVE-2026-84411
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling…
9.8
Critical