MikroTik RouterOS security vulnerabilities
Networking / NAS. Public CVE monitoring for MikroTik RouterOS. Vendor security advisories are linked on this page.
Built for Operators of this product.
21 public records · 0 security-fix timeline events. 0 published in the last 7 days. 10 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 3
- High 1
- Medium 2
- Low 0
2026-08-056 issues2026-11-02
Known exploited
View all known exploited- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 8.94%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 2.28%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
Recently published
Browse catalog- Critical9.1MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured sessionCheck if you run itEPSS 0.27%Oct 21, 2026
- Medium4.6MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage.Check if you run itEPSS 0.15%Sep 16, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 8.94%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 2.28%Sep 5, 2026
- High8.1FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin.Check if you run itEPSS 1.07%May 26, 2026
- Medium6.5RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications.Check if you run itEPSS 0.19%May 5, 2026
- Medium5.5A vulnerability was identified in MikroTik RouterOS 6.49.8.Check if you run itEPSS 0.30%May 2, 2026
- Critical10.0An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaCheck if you run itEPSS 0.29%Oct 27, 2025