Skip to content
OpenAdvisories

Vendor

MikroTik

28 known vulnerabilities.

Products

RouterOS 26 Cloud Hosted Router 1 WinBox 1 RouterOS-TFTP 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-86060 Exploited Public exploit

    SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

    RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticate…

    MikroTik RouterOS Network devices
    KEV Sep 10, 2026
  • Critical 9.2
    CVE-2026-67276 Exploited Public exploit

    SSH user impersonation possible in Mikrotik RouterOS

    RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker …

    MikroTik RouterOS Network devices