Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

MikroTik: actively exploited vulnerabilities

5 vulnerabilities in MikroTik products (RouterOS) are in CISA’s catalog of exploited vulnerabilities, 3 of them added in the last 90 days. Last added: September 25, 2026.

MikroTik security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one MikroTik category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • RouterOS 5 vulnerabilities · Switches and routers

Name used by CISA: MikroTik. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this MikroTik list.

  1. Rank 1MikroTik RouterOS

    CVE-2026-67279

    Recently added

    Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 25, 2026
    CISA deadline
    3 days
    CVSS severity
    6.5 (medium)

  2. Rank 2MikroTik RouterOS

    CVE-2026-86060

    Recently addedHunt for compromise (CISA)

    MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 10, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  3. Rank 3MikroTik RouterOS

    CVE-2026-67277

    Recently added

    MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 10, 2026
    CISA deadline
    3 days
    CVSS severity
    8.2 (high)

  4. Rank 4MikroTik RouterOS

    CVE-2018-7445

    CVE from 2018, added in 2022

    MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 8, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  5. Rank 5MikroTik RouterOS

    CVE-2018-14847

    CVE from 2018, added in 2021

    MikroTik Router OS Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 1, 2021
    CISA deadline
    182 days
    CVSS severity
    9.1 (critical)

Follow and verify

Get new MikroTik vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.