Skip to content

Known vulnerabilities in MikroTik RouterOS

Is your version affected?

CVE Summary Score Published
CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows… 9.1 Critical Oct 21, 2026
CVE-2026-84411 The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling… 9.8 Critical Oct 2, 2026
CVE-2026-86060 Exploited MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability 9.2 Critical Sep 5, 2026
CVE-2026-67276 RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized… 9.2 Critical Sep 5, 2026
CVE-2023-30799 MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue 9.1 Critical Jul 19, 2023

Other MikroTik products