Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

5 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-67277 High · 8.2 KEV High · 55 CWE-306 Sep 5, 2026

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel. This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)

CVE-2026-86060 Critical · 9.8 KEV Urgent · 76 Public exploit CWE-88 Sep 5, 2026

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)

CVE-2026-67279 Medium · 6.5 KEV High · 57 Public exploit CWE-841 Sep 5, 2026

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of files in the RouterOS managed file namespace, including support files containing configuration and diagnostic data.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)

CVE-2018-14847 Critical · 9.1 KEV Urgent · 83 Public exploit CWE-22 Aug 2, 2018

MikroTik Router OS Directory Traversal Vulnerability

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

CVE-2018-7445 Critical · 9.8 KEV Urgent · 71 Public exploit CWE-119 Mar 19, 2018

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.