MikroTik vulnerabilities
28 published CVEs name MikroTik among the affected products; CISA lists 3 of them as exploited in the wild.
- 28Published CVEs28 of them scored
- 19Last 12 monthspublished in the last year
- 5Critical14 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-67279
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
Mikrotik · RouterOS
ExploitedMedium6.9 - CVE-2026-86060
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
Mikrotik · RouterOS
ExploitedCritical9.2 - CVE-2026-67277
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
Mikrotik · RouterOS
ExploitedHigh8.8