MSRXMikroTik vulnerabilities being exploited
3 MikroTik flaws were confirmed exploited in the wild in the past 365 days, across 1 product: RouterOS. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-09-25 | CVE-2026-67279 RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060. | 2026-09-28 |
| 2026-09-10 | CVE-2026-86060 RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation. | 2026-09-13 |
| 2026-09-10 | CVE-2026-67277 RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service. | 2026-09-13 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.