What’s Vulnerable › Products
MikroTik RouterOS vulnerabilities
103 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 24 published in the last 12 months.
Check whether your MikroTik RouterOS version is affected
Exploited MikroTik RouterOS vulnerabilities
- CVE-2026-67279 — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
- CVE-2026-86060 — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- CVE-2026-67277 — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
- CVE-2018-7445 — MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
- CVE-2018-14847 — MikroTik Router OS Directory Traversal Vulnerability
Latest MikroTik RouterOS vulnerabilities
- CVE-2026-89035 — MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass (CVSS 7.4)
- CVE-2026-112158 — MikroTik RouterOS ipt_SAME.ko same_check integer overflow (CVSS 6.5)
- CVE-2026-103903 — MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation (CVSS 8.8)
- CVE-2026-84411 — MikroTik RouterOS Integer Underflow (CVSS 9.8)
- CVE-2026-93345 — MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI (CVSS 7.5)
- CVE-2026-89028 — MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX (CVSS 7.5)
- CVE-2026-56719 — MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX (CVSS 6.5)
- CVE-2026-89021 — MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction (CVSS 6.9)
- CVE-2026-89020 — MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path (CVSS 4.3)
- CVE-2026-86060 — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (CVSS 9.8) — exploited
- CVE-2026-67281 — Unauthenticated file read in Mikrotik RouterOS (CVSS 7.5)
- CVE-2026-67279 — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (CVSS 6.5) — exploited
- CVE-2026-67278 — TLS server impersonation possible in Mikrotik RouterOS (CVSS 9.1)
- CVE-2026-67277 — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (CVSS 8.2) — exploited
- CVE-2026-67276 — SSH user impersonation possible in Mikrotik RouterOS (CVSS 8.1)
- CVE-2026-14227 — Insufficient session expiration in MikroTik RouterOS (CVSS 4.9)
- CVE-2026-16347 — Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router (CVSS 8.8)
- CVE-2025-42611 — Improper certificate validation in multiple RouterOS services (CVSS 6.5)
- CVE-2026-7668 — MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds (CVSS 7.3)
- CVE-2025-10948 — MikroTik RouterOS libjson.so print parse_json_element buffer overflow (CVSS 8.8)
- CVE-2025-6563 — Cross-site scripting via dst parameter in RouterOS WiFi hotspot (CVSS 4.8)
- CVE-2025-6443 — Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability (CVSS 7.2)
- CVE-2024-54952 — (CVSS 7.5)
- CVE-2024-54772 — (CVSS 5.4)
- CVE-2023-32154 — Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.5)