Technology · MikroTik
MikroTik RouterOS vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 22 vulnerabilities in MikroTik RouterOS: 0 in the last 7 days and 16 in the last 90 days, 7 of them critical and 5 exploited in the wild. The most recent, CVE-2026-89035, was published on 21 October 2026. 3 vulnerabilities in the last four weeks, down 57% on the four before (7). 0 critical against 1.
- Last 7 days
- 0
- Last 90 days
- 16
- Critical, all time
- 7
- Exploited in the wild
- 5
About MikroTik RouterOS
Operating system and router control software by MikroTik.
Latest MikroTik RouterOS vulnerabilities
- CVE-2026-89035: MikroTik RouterOS session token replay authentication bypass in WebFighighCVSS 7.4
- CVE-2026-112158: MikroTik RouterOS integer overflow in ipt_SAME modulemediumCVSS 6.5
- CVE-2026-103903: MikroTik RouterOS WinBox incorrect authorization in authenticationhighCVSS 8.8EPSS 0.4%
- CVE-2026-84411: MikroTik RouterOS integer underflowcriticalCVSS 9.8EPSS 0.9%
- CVE-2026-93345: MikroTik RouterOS improper input validation in BGP labelled-VPN NLRIhighCVSS 7.5EPSS 0.5%
- CVE-2025-56566: MikroTik firmware cleartext credential storagemediumCVSS 4.6EPSS 0.2%
- CVE-2026-89028: MikroTik RouterOS heap corruption in SMB1 SessionSetupAndXhighCVSS 7.5EPSS 0.6%
- CVE-2026-56719: MikroTik RouterOS out-of-bounds read in SMB daemonmediumCVSS 6.5EPSS 0.4%
- CVE-2026-89021: MikroTik RouterOS path traversal in container OCI/tar extractionmediumCVSS 6.9EPSS 0.4%
- CVE-2026-89020: MikroTik RouterOS stack buffer overflow in TFTP clientmediumCVSS 4.3EPSS 0.5%
- CVE-2026-86060: MikroTik RouterOS argument delimiter neutralization privilege escalationcriticalexploited in the wildCVSS 9.8EPSS 1.8%
- CVE-2026-67281: MikroTik RouterOS WebFig uninitialized pointer file readhighCVSS 7.5EPSS 0.6%
- CVE-2026-67279: Mikrotik RouterOS improper behavioral workflow enforcementcriticalexploited in the wildCVSS 6.5EPSS 0.7%
- CVE-2026-67278: MikroTik RouterOS malformed RSA/PKCS#1 v1.5 signature acceptancecriticalCVSS 9.1EPSS 0.3%
- CVE-2026-67277: MikroTik RouterOS missing authentication in btest servicecriticalexploited in the wildCVSS 8.2EPSS 1.6%
- CVE-2026-67276: MikroTik RouterOS SSH RSA public key comparison bypasshighCVSS 8.1EPSS 0.4%
- CVE-2026-14227: MikroTik RouterOS insufficient session expiration in APImediumCVSS 4.9
- CVE-2026-16347: MikroTik RouterOS improper restriction of excessive authentication attempts in APIhighCVSS 8.8
- CVE-2026-39042: MikroTik RouterOS denial of service in libumsg.so unflatten functioninfoCVSS 0
- CVE-2026-7668: MikroTik RouterOS out-of-bounds read in SCEP EndpointhighCVSS 7.3EPSS 0.1%
- CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerabilitycriticalexploited in the wildCVSS 9.1
Most severe MikroTik RouterOS vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-86060: MikroTik RouterOS argument delimiter neutralization privilege escalationcriticalexploited in the wildCVSS 9.8EPSS 1.8%
- CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerabilitycriticalexploited in the wildCVSS 9.1
- CVE-2026-67277: MikroTik RouterOS missing authentication in btest servicecriticalexploited in the wildCVSS 8.2EPSS 1.6%
- CVE-2026-67279: Mikrotik RouterOS improper behavioral workflow enforcementcriticalexploited in the wildCVSS 6.5EPSS 0.7%
- CVE-2026-84411: MikroTik RouterOS integer underflowcriticalCVSS 9.8EPSS 0.9%
- CVE-2026-67278: MikroTik RouterOS malformed RSA/PKCS#1 v1.5 signature acceptancecriticalCVSS 9.1EPSS 0.3%
- CVE-2026-103903: MikroTik RouterOS WinBox incorrect authorization in authenticationhighCVSS 8.8EPSS 0.4%
- CVE-2026-16347: MikroTik RouterOS improper restriction of excessive authentication attempts in APIhighCVSS 8.8
- CVE-2026-67276: MikroTik RouterOS SSH RSA public key comparison bypasshighCVSS 8.1EPSS 0.4%
Vulnerabilities per week
3 vulnerabilities in the last four weeks, down 57% on the four before (7). 0 critical against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 6 | 4 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 5 | 0 | |
| 21 Sep 2026 | 1 | 0 | |
| 28 Sep 2026 | 1 | 1 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 1 | 0 | |
| 19 Oct 2026 | 2 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many MikroTik RouterOS vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/routeros)<a href="https://junglewise.ai/threats/technologies/routeros"><img src="https://junglewise.ai/threats/technologies/routeros/badge.svg" alt="MikroTik RouterOS vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/routeros.json, and this page as text at https://junglewise.ai/threats/technologies/routeros.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "MikroTik RouterOS vulnerabilities", https://junglewise.ai/threats/technologies/routeros, 12 November 2026.