Skip to content
OpenAdvisories

Vendor

MikroTik

28 known vulnerabilities.

Products

RouterOS 26 Cloud Hosted Router 1 WinBox 1 RouterOS-TFTP 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-89020 Public exploit

    MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation

    MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…

    MikroTik RouterOS Network devices
  • High 8.7
    CVE-2026-67281 Public exploit

    Unauthenticated file read in Mikrotik RouterOS

    RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that…

    MikroTik RouterOS Network devices
  • High 7.5
    CVE-2024-2169 Public exploit

    Implementations of UDP application protocols are susceptible to network loops and denial of service

    Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

    Microsoft MikroTik dproxy-nexgen RouterOS-TFTP Network devices
  • High 7.5
    CVE-2023-30800 Public exploit

    MikroTik RouterOS Web Interface Heap Corruption

    The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immed…

    MikroTik RouterOS Network devices