CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
MikroTik RouterOS Authentication Bypass, Kernel Panic, and Info Leak (CVE-2026-67277) Security Advisory
[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific patched releases.
[Impact] Unauthenticated attackers can exploit the bandwidth test (btest) feature to leak kernel memory or cause a Denial of Service (DoS) via kernel restart.
[Mitigation] Apply security patches (6.49.21, 7.23.4, 7.24.2 or later) and disable the bandwidth test server.
Linux Kernel POSIX CPU Timers Race Condition Vulnerability (CVE-2025-38352) Technical Advisory
[Affected Scope] Linux kernel deployments where CONFIG_POSIX_CPU_TIMERS_TASK_WORK is disabled or not supported
[Impact] Local attackers can exploit a race condition to trigger a kernel panic (DoS) or potentially achieve Local Privilege Escalation (LPE) via memory corruption
[Mitigation] Apply the official stable kernel patches or ensure CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is enabled in the kernel configuration