Skip to content
OpenAdvisories

Archive

5 September 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-67281 Public exploit

    Unauthenticated file read in Mikrotik RouterOS

    RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that…