CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
MikroTik RouterOS SSH Argument Injection Privilege Escalation Vulnerability (CVE-2026-86060)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.
[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.
[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.
MikroTik RouterOS SSH Authentication Bypass and File Manipulation (CVE-2026-67279)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.
[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.
[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.
MikroTik RouterOS Authentication Bypass, Kernel Panic, and Info Leak (CVE-2026-67277) Security Advisory
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific patched releases.
[Impact] Unauthenticated attackers can exploit the bandwidth test (btest) feature to leak kernel memory or cause a Denial of Service (DoS) via kernel restart.
[Mitigation] Apply security patches (6.49.21, 7.23.4, 7.24.2 or later) and disable the bandwidth test server.
MikroTik RouterOS WinBox Directory Traversal Arbitrary File Read/Write Vulnerability (CVE-2018-14847) Analysis and Mitigation Guide
[Affected Scope] MikroTik RouterOS versions 6.29 through 6.42 with the WinBox interface enabled
[Impact] Unauthenticated remote attackers can read arbitrary system files (including user credentials), and authenticated attackers can write arbitrary files, leading to complete device compromise
[Mitigation] Immediately upgrade RouterOS to patched versions (6.40.9, 6.42.1 or higher) and restrict or disable external WinBox port (8291) access
MikroTik RouterOS SMB Service Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2018-7445) Analysis and Mitigation Guide
[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges
[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical