Skip to content
OpenAdvisories
Critical ICSA-26-272-06 1 CVE

MikroTik RouterOS

Published Sep 29, 2026 · Updated Sep 30, 2026 · Revision 2

Vendor: MikroTik Product: RouterOS

Summary

Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service.

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-84411 Public exploit

    MikroTik RouterOS Integer Underflow

    The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution …

    MikroTik RouterOS Network devices

Revision history

  1. #2

    Update A - Fixing upgrade version typo

  2. #1

    Initial Publication

References