Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

RouterOS — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in RouterOS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities affecting the RouterOS product line, which serves as the operating system for MikroTik's networking equipment. The collected data spans multiple years of reported flaws, primarily categorizing known security weaknesses such as buffer overflows, access control issues, and authentication bypasses. Readers can use this aggregation to track the vendor's security advisories, understand the recurring patterns of specific weakness classes, and review the complete vulnerability history associated with the RouterOS product family.

Vendor: MikroTik

CVE ID Title CVSS Severity Published
CVE-2026-84411 MikroTik RouterOS Integer Underflow CWE-191 9.8 Critical 2026-10-02
CVE-2026-93345 MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI CWE-1284 7.5 High 2026-09-22
CVE-2026-89028 MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX CWE-122 7.5 High 2026-09-16
CVE-2026-56719 MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX CWE-125 6.5 Medium 2026-09-16
CVE-2026-89021 MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction CWE-59 6.9 Medium 2026-09-14
CVE-2026-89020 MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path CWE-121 4.3 Medium 2026-09-14
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS CWE-88 9.2 Critical 2026-09-05
CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS CWE-841 6.9 Medium 2026-09-05
CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS CWE-824 8.7 High 2026-09-05
CVE-2026-67278 TLS server impersonation possible in Mikrotik RouterOS CWE-347 6.3 Medium 2026-09-05
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service CWE-306 8.8 High 2026-09-05
CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS CWE-347 9.2 Critical 2026-09-05
CVE-2026-14227 Insufficient session expiration in MikroTik RouterOS CWE-613 4.9 Medium 2026-07-30
CVE-2026-16347 Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router CWE-307 8.8 High 2026-07-28
CVE-2025-42611 Improper certificate validation in multiple RouterOS services CWE-295 6.5 Medium 2026-05-05
CVE-2026-7668 MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds CWE-125 7.3 High 2026-05-02
CVE-2025-10948 MikroTik RouterOS libjson.so print parse_json_element buffer overflow CWE-120 8.8 High 2025-09-25
CVE-2025-6563 Cross-site scripting via dst parameter in RouterOS WiFi hotspot CWE-20 6.1AI Medium AI 2025-07-03
CVE-2025-6443 Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability CWE-284 9.8AI Critical AI 2025-06-25
CVE-2023-32154 Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 8.8 - 2024-05-03
CVE-2023-30800 MikroTik RouterOS Web Interface Heap Corruption CWE-787 7.5 High 2023-09-07
CVE-2023-30799 MikroTik RouterOS Administrator Privilege Escalation CWE-269 9.1 Critical 2023-07-19
CVE-2022-45315 MikroTik RouterOS 缓冲区错误漏洞 CWE-125 6.4 Medium 2022-12-05
CVE-2019-3943 MikroTik RouterOS 路径遍历漏洞 CWE-23 8.1 - 2019-04-10

All 24 known CVE vulnerabilities affecting RouterOS with full Chinese analysis, references, and POCs where available.