# MikroTik RouterOS vulnerabilities Source: https://junglewise.ai/threats/technologies/routeros Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/routeros.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 22 vulnerabilities in MikroTik RouterOS: 0 in the last 7 days and 16 in the last 90 days, 7 of them critical and 5 exploited in the wild. The most recent, CVE-2026-89035, was published on 21 October 2026. 3 vulnerabilities in the last four weeks, down 57% on the four before (7). 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 16 - All time: 22 (7 critical, 5 exploited in the wild) ## About MikroTik RouterOS Operating system and router control software by MikroTik. ## Latest MikroTik RouterOS vulnerabilities - [CVE-2026-89035: MikroTik RouterOS session token replay authentication bypass in WebFig](https://junglewise.ai/threats/cve-2026-89035-mikrotik-routeros-through-7-24-5-contains-a-session-token-replay) (high, CVSS 7.4, published 21 Oct 2026) - [CVE-2026-112158: MikroTik RouterOS integer overflow in ipt_SAME module](https://junglewise.ai/threats/cve-2026-112158-a-weakness-has-been-identified-in-mikrotik-routeros-up-to-6-40-5) (medium, CVSS 6.5, published 19 Oct 2026) - [CVE-2026-103903: MikroTik RouterOS WinBox incorrect authorization in authentication](https://junglewise.ai/threats/cve-2026-103903-an-incorrect-authorization-vulnerability-in-the-winbox) (high, CVSS 8.8, published 12 Oct 2026) - [CVE-2026-84411: MikroTik RouterOS integer underflow](https://junglewise.ai/threats/cve-2026-84411-mikrotik-routeros) (critical, CVSS 9.8, published 2 Oct 2026) - [CVE-2026-93345: MikroTik RouterOS improper input validation in BGP labelled-VPN NLRI](https://junglewise.ai/threats/cve-2026-93345-mikrotik-routeros-before-7-25beta4-contains-an-improper-input) (high, CVSS 7.5, published 22 Sep 2026) - [CVE-2025-56566: MikroTik firmware cleartext credential storage](https://junglewise.ai/threats/cve-2025-56566-mikrotik-firmware-cleartext-credential-storage) (medium, CVSS 4.6, published 16 Sep 2026) - [CVE-2026-89028: MikroTik RouterOS heap corruption in SMB1 SessionSetupAndX](https://junglewise.ai/threats/cve-2026-89028-mikrotik-routeros-heap-corruption-in-smb1-sessionsetupandx) (high, CVSS 7.5, published 16 Sep 2026) - [CVE-2026-56719: MikroTik RouterOS out-of-bounds read in SMB daemon](https://junglewise.ai/threats/cve-2026-56719-mikrotik-routeros-out-of-bounds-read-in-smb-daemon) (medium, CVSS 6.5, published 16 Sep 2026) - [CVE-2026-89021: MikroTik RouterOS path traversal in container OCI/tar extraction](https://junglewise.ai/threats/cve-2026-89021-mikrotik-routeros-path-traversal-in-container-oci-tar-extraction) (medium, CVSS 6.9, published 14 Sep 2026) - [CVE-2026-89020: MikroTik RouterOS stack buffer overflow in TFTP client](https://junglewise.ai/threats/cve-2026-89020-mikrotik-routeros-stack-buffer-overflow-in-tftp-client) (medium, CVSS 4.3, published 14 Sep 2026) - [CVE-2026-86060: MikroTik RouterOS argument delimiter neutralization privilege escalation](https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege) (critical, exploited in the wild, CVSS 9.8, published 5 Sep 2026) - [CVE-2026-67281: MikroTik RouterOS WebFig uninitialized pointer file read](https://junglewise.ai/threats/cve-2026-67281-routeros-webfig-contains-an-unauthenticated-file-read) (high, CVSS 7.5, published 5 Sep 2026) - [CVE-2026-67279: Mikrotik RouterOS improper behavioral workflow enforcement](https://junglewise.ai/threats/cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement) (critical, exploited in the wild, CVSS 6.5, published 5 Sep 2026) - [CVE-2026-67278: MikroTik RouterOS malformed RSA/PKCS#1 v1.5 signature acceptance](https://junglewise.ai/threats/cve-2026-67278-mikrotik-routeros-accepts-malformed-rsa-pkcs-1-v1-5-signatures) (critical, CVSS 9.1, published 5 Sep 2026) - [CVE-2026-67277: MikroTik RouterOS missing authentication in btest service](https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service) (critical, exploited in the wild, CVSS 8.2, published 5 Sep 2026) - [CVE-2026-67276: MikroTik RouterOS SSH RSA public key comparison bypass](https://junglewise.ai/threats/cve-2026-67276-routeros-does-not-compare-the-complete-rsa-public-key-when) (high, CVSS 8.1, published 5 Sep 2026) - [CVE-2026-14227: MikroTik RouterOS insufficient session expiration in API](https://junglewise.ai/threats/cve-2026-14227-mikrotik-routeros-insufficient-session-expiration-in-api) (medium, CVSS 4.9, published 30 Jul 2026) - [CVE-2026-16347: MikroTik RouterOS improper restriction of excessive authentication attempts in API](https://junglewise.ai/threats/cve-2026-16347-mikrotik-routeros-improper-restriction-of-excessive) (high, CVSS 8.8, published 28 Jul 2026) - [CVE-2026-39042: MikroTik RouterOS denial of service in libumsg.so unflatten function](https://junglewise.ai/threats/cve-2026-39042-mikrotik-routeros-denial-of-service-in-libumsg-so-unflatten) (info, CVSS 0, published 13 Jul 2026) - [CVE-2026-7668: MikroTik RouterOS out-of-bounds read in SCEP Endpoint](https://junglewise.ai/threats/cve-2026-7668-mikrotik-routeros-out-of-bounds-read-in-scep-endpoint) (high, CVSS 7.3, published 2 May 2026) - [CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-7445-mikrotik-routeros-stack-based-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Sep 2022) - [CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-14847-mikrotik-router-os-directory-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 1 Dec 2021) ## Most severe MikroTik RouterOS vulnerabilities - [CVE-2026-86060: MikroTik RouterOS argument delimiter neutralization privilege escalation](https://junglewise.ai/threats/cve-2026-86060-mikrotik-routeros-argument-delimiter-neutralization-privilege) (critical, exploited in the wild, CVSS 9.8, published 5 Sep 2026) - [CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2018-7445-mikrotik-routeros-stack-based-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 8 Sep 2022) - [CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2018-14847-mikrotik-router-os-directory-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.1, published 1 Dec 2021) - [CVE-2026-67277: MikroTik RouterOS missing authentication in btest service](https://junglewise.ai/threats/cve-2026-67277-mikrotik-routeros-missing-authentication-in-btest-service) (critical, exploited in the wild, CVSS 8.2, published 5 Sep 2026) - [CVE-2026-67279: Mikrotik RouterOS improper behavioral workflow enforcement](https://junglewise.ai/threats/cve-2026-67279-mikrotik-routeros-improper-behavioral-workflow-enforcement) (critical, exploited in the wild, CVSS 6.5, published 5 Sep 2026) - [CVE-2026-84411: MikroTik RouterOS integer underflow](https://junglewise.ai/threats/cve-2026-84411-mikrotik-routeros) (critical, CVSS 9.8, published 2 Oct 2026) - [CVE-2026-67278: MikroTik RouterOS malformed RSA/PKCS#1 v1.5 signature acceptance](https://junglewise.ai/threats/cve-2026-67278-mikrotik-routeros-accepts-malformed-rsa-pkcs-1-v1-5-signatures) (critical, CVSS 9.1, published 5 Sep 2026) - [CVE-2026-103903: MikroTik RouterOS WinBox incorrect authorization in authentication](https://junglewise.ai/threats/cve-2026-103903-an-incorrect-authorization-vulnerability-in-the-winbox) (high, CVSS 8.8, published 12 Oct 2026) - [CVE-2026-16347: MikroTik RouterOS improper restriction of excessive authentication attempts in API](https://junglewise.ai/threats/cve-2026-16347-mikrotik-routeros-improper-restriction-of-excessive) (high, CVSS 8.8, published 28 Jul 2026) - [CVE-2026-67276: MikroTik RouterOS SSH RSA public key comparison bypass](https://junglewise.ai/threats/cve-2026-67276-routeros-does-not-compare-the-complete-rsa-public-key-when) (high, CVSS 8.1, published 5 Sep 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, down 57% on the four before (7). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 6 | 4 | 3 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 5 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 1 | 1 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 2 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "MikroTik RouterOS vulnerabilities", https://junglewise.ai/threats/technologies/routeros, 12 November 2026.