# cve.now: MikroTik

The newest entries naming MikroTik as an affected vendor (up to 200), of 28 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-89035](https://cve.now/CVE-2026-89035.md): MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass (CVSS 9.1)
- [CVE-2026-112158](https://cve.now/CVE-2026-112158.md): MikroTik RouterOS ipt\_SAME.ko same\_check integer overflow (CVSS 7.1)
- [CVE-2026-103903](https://cve.now/CVE-2026-103903.md): MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation (CVSS 8.7)
- [CVE-2026-84411](https://cve.now/CVE-2026-84411.md): MikroTik RouterOS Integer Underflow (CVSS 9.8)
- [CVE-2026-93345](https://cve.now/CVE-2026-93345.md): MikroTik RouterOS \< 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI (CVSS 8.7)
- [CVE-2026-89028](https://cve.now/CVE-2026-89028.md): MikroTik RouterOS \< 7.24 Heap Corruption via SMB1 SessionSetupAndX (CVSS 8.2)
- [CVE-2026-56719](https://cve.now/CVE-2026-56719.md): MikroTik RouterOS \< 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX (CVSS 6.3)
- [CVE-2026-89021](https://cve.now/CVE-2026-89021.md): MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction (CVSS 6.9)
- [CVE-2026-89020](https://cve.now/CVE-2026-89020.md): MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation (CVSS 8.7)
- [CVE-2026-86060](https://cve.now/CVE-2026-86060.md): SSH session privilege manipulation via a crafted username in Mikrotik RouterOS (CVSS 9.2, KEV)
- [CVE-2026-67281](https://cve.now/CVE-2026-67281.md): Unauthenticated file read in Mikrotik RouterOS (CVSS 8.7)
- [CVE-2026-67279](https://cve.now/CVE-2026-67279.md): SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS (CVSS 6.9, KEV)
- [CVE-2026-67278](https://cve.now/CVE-2026-67278.md): TLS server impersonation possible in Mikrotik RouterOS (CVSS 6.3)
- [CVE-2026-67277](https://cve.now/CVE-2026-67277.md): Kernel memory disclosure and denial of service in MikroTik RouterOS btest service (CVSS 8.8, KEV)
- [CVE-2026-67276](https://cve.now/CVE-2026-67276.md): SSH user impersonation possible in Mikrotik RouterOS (CVSS 9.2)
- [CVE-2026-14227](https://cve.now/CVE-2026-14227.md): Insufficient session expiration in MikroTik RouterOS (CVSS 6.9)
- [CVE-2026-16347](https://cve.now/CVE-2026-16347.md): Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router (CVSS 8.8)
- [CVE-2025-42611](https://cve.now/CVE-2025-42611.md): Improper certificate validation in multiple RouterOS services (CVSS 6.5)
- [CVE-2026-7668](https://cve.now/CVE-2026-7668.md): MikroTik RouterOS SCEP Endpoint scep.p ASN1\_STRING\_data out-of-bounds (CVSS 6.9)
- [CVE-2025-10948](https://cve.now/CVE-2025-10948.md): MikroTik RouterOS libjson.so print parse\_json\_element buffer overflow (CVSS 8.7)
- [CVE-2025-6563](https://cve.now/CVE-2025-6563.md): Cross-site scripting via dst parameter in RouterOS WiFi hotspot (CVSS 4.8)
- [CVE-2025-6443](https://cve.now/CVE-2025-6443.md): Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability (CVSS 7.2)
- [CVE-2023-32154](https://cve.now/CVE-2023-32154.md): Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.5)
- [CVE-2024-2169](https://cve.now/CVE-2024-2169.md): Implementations of UDP application protocols are susceptible to network loops and denial of service (CVSS 7.5)
- [CVE-2023-30800](https://cve.now/CVE-2023-30800.md): MikroTik RouterOS Web Interface Heap Corruption (CVSS 7.5)
- [CVE-2023-30799](https://cve.now/CVE-2023-30799.md): MikroTik RouterOS Administrator Privilege Escalation (CVSS 9.1)
- [CVE-2019-3981](https://cve.now/CVE-2019-3981.md): MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. (no CVSS)
- [CVE-2019-3943](https://cve.now/CVE-2019-3943.md): MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an auth (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mikrotik
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.