RO
Product
RouterOS
On CISA KEVExploited in the wild
101
CVEs
5
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 37Medium 52Low 1
Watch
Add RouterOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86060 In wildKEV | 9.8 | Sep 5 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS Affected: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21 |
| CVE-2018-7445 In wildKEV | 9.8 | Mar 19 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability Affected: before 6.41.3; 6.42; 6.42; 6.42; 6.42; 6.42; +7 more |
| CVE-2018-14847 In wildKEV | 9.1 | Aug 2 | MikroTik Router OS Directory Traversal Vulnerability Affected: through 6.42 |
| CVE-2026-67277 In wildKEV | 8.2 | Sep 5 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service Affected: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21 |
| CVE-2026-67279 In wildKEV | 6.5 | Sep 5 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS Affected: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21 |
Showing 5