Skip to content
OpenAdvisories

Vendor

MikroTik

28 known vulnerabilities.

Products

RouterOS 26 Cloud Hosted Router 1 WinBox 1 RouterOS-TFTP 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-67277 Exploited

    Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

    RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail f…

    MikroTik RouterOS Network devices
    KEV Sep 10, 2026