MikroTik RouterOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
21 matching records
- Critical9.1MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured sessionCheck if you run itEPSS 0.27%Oct 21, 2026
- UnknownCVE-2026-98489: net: atl1c: fix soft lockup on out-of-range tpd_cons readCheck if you run itEPSS 0.18%Oct 18, 2026
- UnknownMikroTik RouterOSCheck if you run itEPSS 0.86%Sep 29, 2026
- Medium4.6MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage.Check if you run itEPSS 0.15%Sep 16, 2026
- Critical9.2MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityPatch nowKEVEPSS 6.39%Sep 5, 2026
- Medium6.9Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityPatch nowKEVEPSS 2.28%Sep 5, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 1.56%Sep 5, 2026
- Critical9.2MikroTik RouterOS Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 8.94%Sep 5, 2026
- High8.1FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin.Check if you run itEPSS 1.07%May 26, 2026
- High7.5Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB ser…Check if you run itEPSS 0.59%May 8, 2026
- Medium6.5RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications.Check if you run itEPSS 0.19%May 5, 2026
- Medium5.5A vulnerability was identified in MikroTik RouterOS 6.49.8.Check if you run itEPSS 0.30%May 2, 2026
- Critical10.0An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaCheck if you run itEPSS 0.29%Oct 27, 2025
- High8.7A vulnerability has been found in MikroTik RouterOS 7.Check if you run itEPSS 1.03%Sep 25, 2025
- Medium4.8A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on versions below 7.19.2.Check if you run itEPSS 0.72%Jul 3, 2025
- High7.2Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability.Check if you run itEPSS 0.57%Jun 25, 2025
- High7.5MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability.Check if you run itEPSS 0.57%May 29, 2025
- UnknownMikroTik RouterOS Winbox or HTTP Interface Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.43%Sep 18, 2024
- Critical9.1MikroTik Router OS Directory Traversal VulnerabilityPatch nowKEVEPSS 95.98%Aug 2, 2018
- UnknownMikroTik RouterOS Out-of-bounds WritePatch nowKEVEPSS 2.53%Mar 28, 2018
- Critical9.8MikroTik RouterOS Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 65.83%Mar 19, 2018
Sort
21 records