Skip to content
Sign in
6.3 Medium

CVE-2026-56719 MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows…

Description

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read occurs in the SessionSetupAndX handler before any credential validation, potentially exposing sensitive memory contents.

Affected products and versions

Product Affected versions Fixed in
RouterOS 7.24 earliest → < 7.24.0 7.24.0
RouterOS 7.0 7.0.0 → 7.11.2 No fix stated
RouterOS 6.49 earliest → 6.49.18 No fix stated

Other CVEs of RouterOS

The 26 CVEs of RouterOS →
CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows… 9.1 Critical CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8 7.1 High CVE-2026-103903 An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote… 8.7 High CVE-2026-84411 The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling… 9.8 Critical
Track this CVE