Skip to content
Sign in
8.2 High

CVE-2026-89028 MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows…

Description

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a uniPwdLen field that triggers an integer underflow, causing the resulting value to be used as the copy length in a memory copy operation into a smaller heap buffer, corrupting adjacent heap memory.

Affected products and versions

Product Affected versions Fixed in
RouterOS 7.24 earliest → < 7.24.0 7.24.0
RouterOS 7.0 7.0.0 → 7.11.2 No fix stated
RouterOS 6.49 earliest → 6.49.18 No fix stated

Other CVEs of RouterOS

The 26 CVEs of RouterOS →
CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows… 9.1 Critical CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8 7.1 High CVE-2026-103903 An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote… 8.7 High CVE-2026-84411 The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling… 9.8 Critical
Track this CVE