Skip to content
OpenAdvisories

Vendor

MikroTik

28 known vulnerabilities.

Products

RouterOS 26 Cloud Hosted Router 1 WinBox 1 RouterOS-TFTP 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-86060 Exploited Public exploit

    SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

    RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticate…

    MikroTik RouterOS Network devices
    KEV Sep 10, 2026
  • Medium 6.9
    CVE-2026-67279 Exploited Public exploit

    SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

    RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the…

    MikroTik RouterOS Network devices
    KEV Sep 25, 2026
  • High 8.8
    CVE-2026-67277 Exploited

    Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

    RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail f…

    MikroTik RouterOS Network devices
    KEV Sep 10, 2026
  • Critical 9.2
    CVE-2026-67276 Exploited Public exploit

    SSH user impersonation possible in Mikrotik RouterOS

    RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker …

    MikroTik RouterOS Network devices