Skip to content
OpenAdvisories

Product · MikroTik

RouterOS

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-89020 Public exploit

    MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation

    MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…

    MikroTik RouterOS Network devices
  • High 8.7
    CVE-2026-67281 Public exploit

    Unauthenticated file read in Mikrotik RouterOS

    RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that…

    MikroTik RouterOS Network devices
  • High 7.5
    CVE-2023-30800 Public exploit

    MikroTik RouterOS Web Interface Heap Corruption

    The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immed…

    MikroTik RouterOS Network devices