CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
MikroTik RouterOS SSH Argument Injection Privilege Escalation Vulnerability (CVE-2026-86060)
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.
[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.
[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.
MikroTik RouterOS WinBox Directory Traversal Arbitrary File Read/Write Vulnerability (CVE-2018-14847) Analysis and Mitigation Guide
[Affected Scope] MikroTik RouterOS versions 6.29 through 6.42 with the WinBox interface enabled
[Impact] Unauthenticated remote attackers can read arbitrary system files (including user credentials), and authenticated attackers can write arbitrary files, leading to complete device compromise
[Mitigation] Immediately upgrade RouterOS to patched versions (6.40.9, 6.42.1 or higher) and restrict or disable external WinBox port (8291) access
MikroTik RouterOS SMB Service Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2018-7445) Analysis and Mitigation Guide
[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges
[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical