Vendor
MikroTik
110 known vulnerabilities in products by MikroTik, 5 of them actively exploited (CISA KEV).
Key figures
110
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-86060 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS In CISA KEV | 9.8 | |
| Critical | CVE-2018-7445 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2018-14847 | MikroTik Router OS Directory Traversal Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2026-67279 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS In CISA KEV | 6.5 | |
| Critical | CVE-2026-67277 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service In CISA KEV | 8.2 | |
| Critical | CVE-2026-67276 | SSH user impersonation possible in Mikrotik RouterOS | 8.1 | |
| High | CVE-2021-41987 | MikroTik RouterOS: Heap-Based Buffer Overflow | 8.1 | |
| High | CVE-2018-1156 | MikroTik RouterOS: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2017-7285 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2019-3924 | Tenable MikroTik RouterOS: Confused Deputy | 7.5 | |
| High | CVE-2017-6444 | MikroTik RouterOS: Denial of Service | 7.5 | |
| High | CVE-2018-10070 | MikroTik Router Firmware: security vulnerability | 7.5 | |
| High | CVE-2024-2169 | Implementations of UDP application protocols are susceptible to network loops and denial of service | 7.5 | |
| High | CVE-2019-3978 | MikroTik RouterOS: Missing Authentication for Critical Function | 7.5 | |
| High | CVE-2017-17538 | MikroTik Router Firmware: Denial of Service | 7.5 | |
| Critical | CVE-2017-20149 | MikroTik RouterOS: Memory Corruption | 9.8 | |
| Critical | CVE-2026-84411 | MikroTik RouterOS Integer Underflow | 9.8 | |
| High | CVE-2021-27221 | MikroTik RouterOS: security vulnerability | 8.1 | |
| High | CVE-2019-3943 | MikroTik RouterOS: Relative Path Traversal | 8.1 | |
| High | CVE-2018-5951 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2017-8338 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2020-11881 | MikroTik RouterOS: security vulnerability | 7.5 | |
| Medium | CVE-2018-1157 | MikroTik RouterOS: security vulnerability | 6.5 | |
| Medium | CVE-2019-13954 | MikroTik RouterOS: security vulnerability | 6.5 | |
| Medium | CVE-2019-13955 | MikroTik RouterOS: security vulnerability | 6.5 |
News
Products
| MikroTik RouterOS | 103 | 5 |
| MikroTik WinBox | 3 | 0 |