CVEs we hold for Mikrotik

Records whose assigning authority named Mikrotik as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-89028MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXMikroTik RouterOS

CVE-2026-89021MikroTik RouterOS Path Traversal via Container OCI/tar Image ExtractionMikroTik RouterOS

CVE-2026-89020MikroTik RouterOS Stack Buffer Overflow via TFTP URL PathMikroTik RouterOS

CVE-2026-86060SSH session privilege manipulation via a crafted username in Mikrotik RouterOSMikrotik RouterOS

CVE-2026-7668MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-boundsMikroTik RouterOS

CVE-2026-67281Unauthenticated file read in Mikrotik RouterOSMikrotik RouterOS

CVE-2026-67279SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSMikrotik RouterOS

CVE-2026-67278TLS server impersonation possible in Mikrotik RouterOSMikrotik RouterOS

CVE-2026-67277Kernel memory disclosure and denial of service in MikroTik RouterOS btest serviceMikrotik RouterOS

CVE-2026-67276SSH user impersonation possible in Mikrotik RouterOSMikrotik RouterOS

CVE-2026-56719MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXMikroTik RouterOS

CVE-2026-16347Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted RouterMikroTik Cloud Hosted Router

CVE-2026-14227Insufficient session expiration in MikroTik RouterOSMikroTik RouterOS

CVE-2025-6563Cross-site scripting via dst parameter in RouterOS WiFi hotspotMikroTik RouterOS

CVE-2025-6443Mikrotik RouterOS VXLAN Source IP Improper Access Control VulnerabilityMikrotik RouterOS

CVE-2025-42611Improper certificate validation in multiple RouterOS servicesMikrotik RouterOS

CVE-2025-10948MikroTik RouterOS libjson.so print parse_json_element buffer overflowMikroTik RouterOS

CVE-2024-2169Implementations of UDP application protocols are susceptible to network loops and denial of serviceMikroTik RouterOS-TFTP; Microsoft WDS; dproxy-nexgen

CVE-2023-32154Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution VulnerabilityMikrotik RouterOS

CVE-2023-30800MikroTik RouterOS Web Interface Heap CorruptionMikroTik RouterOS

CVE-2023-30799MikroTik RouterOS Administrator Privilege EscalationMikroTik RouterOS

CVE-2020-5721no title heldn/a MikroTik WinBox

CVE-2020-5720no title heldn/a MikroTik WinBox

CVE-2019-3981no title heldMikroTik WinBox

CVE-2019-3979no title heldn/a MikroTik RouterOS

CVE-2019-3978no title heldn/a MikroTik RouterOS

CVE-2019-3977no title heldn/a MikroTik RouterOS

CVE-2019-3976no title heldn/a MikroTik RouterOS

CVE-2019-3943no title heldMikroTik RouterOS

29 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.