Product by MikroTik
MikroTik RouterOS
103 known vulnerabilities in MikroTik RouterOS (MikroTik), 5 of them actively exploited (CISA KEV).
Key figures
103
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-86060 | SSH session privilege manipulation via a crafted username in Mikrotik RouterOS In CISA KEV | 9.8 | |
| Critical | CVE-2018-7445 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2018-14847 | MikroTik Router OS Directory Traversal Vulnerability In CISA KEV | 9.1 | |
| Critical | CVE-2026-67279 | SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS In CISA KEV | 6.5 | |
| Critical | CVE-2026-67277 | Kernel memory disclosure and denial of service in MikroTik RouterOS btest service In CISA KEV | 8.2 | |
| Critical | CVE-2026-67276 | SSH user impersonation possible in Mikrotik RouterOS | 8.1 | |
| High | CVE-2021-41987 | MikroTik RouterOS: Heap-Based Buffer Overflow | 8.1 | |
| High | CVE-2018-1156 | MikroTik RouterOS: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2017-7285 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2019-3924 | Tenable MikroTik RouterOS: Confused Deputy | 7.5 | |
| High | CVE-2017-6444 | MikroTik RouterOS: Denial of Service | 7.5 | |
| High | CVE-2019-3978 | MikroTik RouterOS: Missing Authentication for Critical Function | 7.5 | |
| Critical | CVE-2017-20149 | MikroTik RouterOS: Memory Corruption | 9.8 | |
| Critical | CVE-2026-84411 | MikroTik RouterOS Integer Underflow | 9.8 | |
| High | CVE-2021-27221 | MikroTik RouterOS: security vulnerability | 8.1 | |
| High | CVE-2019-3943 | MikroTik RouterOS: Relative Path Traversal | 8.1 | |
| High | CVE-2018-5951 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2017-8338 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2020-11881 | MikroTik RouterOS: security vulnerability | 7.5 | |
| Medium | CVE-2018-1157 | MikroTik RouterOS: security vulnerability | 6.5 | |
| Medium | CVE-2019-13954 | MikroTik RouterOS: security vulnerability | 6.5 | |
| Medium | CVE-2019-13955 | MikroTik RouterOS: security vulnerability | 6.5 | |
| High | CVE-2020-10364 | MikroTik RouterOS: security vulnerability | 7.5 | |
| High | CVE-2019-16160 | MikroTik RouterOS: Integer Underflow | 7.5 | |
| Critical | CVE-2022-34960 | MikroTik RouterOS: security vulnerability | 9.8 |