RO
Product
RouterOS
On CISA KEVExploited in the wild
101
CVEs
5
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 37Medium 52Low 1
Watch
Add RouterOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86060 In wildKEV | 9.8 | Sep 5 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS Affected: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21 |
| CVE-2018-7445 In wildKEV | 9.8 | Mar 19 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability Affected: before 6.41.3; 6.42; 6.42; 6.42; 6.42; 6.42; +7 more |
| CVE-2018-14847 In wildKEV | 9.1 | Aug 2 | MikroTik Router OS Directory Traversal Vulnerability Affected: through 6.42 |
| CVE-2026-84411 | 9.8 | Oct 2 | MikroTik RouterOS Integer Underflow Affected: before 7.24 |
| CVE-2022-45315 | 9.8 | Dec 5 | Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process Affected: before 7.6 |
| CVE-2017-20149 | 9.8 | Oct 15 | The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red Affected: before 6.37.5; 6.38 before 6.38.5 |
| CVE-2022-34960 | 9.8 | Aug 25 | The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device Affected: 7.4 |
| CVE-2026-67278 | 9.1 | Sep 5 | TLS server impersonation possible in Mikrotik RouterOS Affected: 7.24 before 7.24.3; 7.0.0 before 7.23.6 |
Showing 8