RO
Product
RouterOS
On CISA KEVExploited in the wild
101
CVEs
5
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 37Medium 52Low 1
Watch
Add RouterOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67277 In wildKEV | 8.2 | Sep 5 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service Affected: 7.24 before 7.24.2; 7.0.0 before 7.23.4; 6.0.0 before 6.49.21 |
| CVE-2026-103903 | 8.8 | Oct 12 | MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation Affected: 7.0.0 before 7.24.5 |
| CVE-2026-16347 | 8.8 | Jul 28 | Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router Affected: All versions |
| CVE-2022-45313 | 8.8 | Dec 5 | Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process Affected: before 7.5 |
| CVE-2019-3976 | 8.8 | Oct 29 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field Affected: through 6.44.5; through 6.45.6 |
| CVE-2018-1156 | 8.8 | Aug 23 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface Affected: before 6.40.9; before 6.42.7 |
| CVE-2026-67276 | 8.1 | Sep 5 | SSH user impersonation possible in Mikrotik RouterOS Affected: 7.24 before 7.24.2; 7.9 before 7.23.4 |
| CVE-2021-41987 | 8.1 | Mar 16 | In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution Affected: 6.46.8; 6.47.9; 6.47.10 |
| CVE-2021-27221 | 8.1 | Mar 19 | MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command Affected: 6.47.9 |
| CVE-2019-3943 | 8.1 | Apr 10 | MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal… Affected: through 6.42.12; through 6.43.12; 6.41; 6.41; 6.41; 6.41; +34 more |
| CVE-2018-10066 | 8.1 | Apr 13 | An issue was discovered in MikroTik RouterOS 6.41.4 Affected: 6.41.4 |
| CVE-2026-93345 | 7.5 | Sep 22 | MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI Affected: through 7.24.2 |
| CVE-2026-89028 | 7.5 | Sep 16 | MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX Affected: through 6.49.18; 7.0.0 through 7.11.2 |
| CVE-2026-67281 | 7.5 | Sep 5 | Unauthenticated file read in Mikrotik RouterOS Affected: 7.24 before 7.24.2; 7.20 before 7.23.4 |
| CVE-2024-54952 | 7.5 | May 29 | MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability Affected: 6.40.5 |
| CVE-2023-32154 | 7.5 | May 3 | Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: before 6.48.7 |
| CVE-2023-30800 | 7.5 | Sep 7 | The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue Affected: 6.0 before 6.49.10 |
| CVE-2020-20021 | 7.5 | Jul 12 | An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon Affected: through 6.46.3 |
| CVE-2023-24094 | 7.5 | Mar 27 | An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets Affected: 6.40.5 |
| CVE-2020-22845 | 7.5 | Feb 28 | A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted FTP requests Affected: 6.47 |
| CVE-2020-22844 | 7.5 | Feb 28 | A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests Affected: 6.47 |
| CVE-2019-16160 | 7.5 | Oct 7 | An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service Affected: before 6.45.5 |
| CVE-2020-11881 | 7.5 | Sep 14 | An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified… Affected: 6.41.3 through 6.46.5; 7.0; 7.0; 7.0 |
| CVE-2020-10364 | 7.5 | Mar 23 | The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via… Affected: through 6.44.3 |
| CVE-2018-5951 | 7.5 | Mar 2 | An issue was discovered in Mikrotik RouterOS Affected: All versions, or not specified |
| CVE-2019-3979 | 7.5 | Oct 29 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack Affected: through 6.44.5; through 6.45.6 |
| CVE-2019-3978 | 7.5 | Oct 29 | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291 Affected: through 6.44.5; through 6.45.6 |
| CVE-2019-3977 | 7.5 | Oct 29 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature Affected: through 6.44.5; through 6.45.6 |
| CVE-2019-13074 | 7.5 | Jul 3 | A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of… Affected: through 6.44.3 |
| CVE-2019-3924 | 7.5 | Feb 20 | MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability Affected: before 6.42.12; before 6.43.12 |
| CVE-2017-8338 | 7.5 | May 18 | A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over… Affected: 6.38.5 |
| CVE-2017-7285 | 7.5 | Mar 29 | A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP… Affected: 6.38.5 |
| CVE-2017-6444 | 7.5 | Mar 12 | The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a… Affected: 6.25 |
| CVE-2026-89035 New | 7.4 | Oct 21 | MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass Affected: through 7.23.6; 7.24.0 through 7.24.5 |
| CVE-2026-7668 | 7.3 | May 2 | MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds Affected: 6.49.8 |
| CVE-2025-6443 | 7.2 | Jun 25 | Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability Affected: before 7.20 |
| CVE-2023-30799 | 7.2 | Jul 19 | MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue Affected: through 6.48.7; 6.34 before 6.49.7 |
Showing 37