CurrentActivity

CURRENT ACTIVITIES
Multiple Vulnerabilities in MikroTik Routers

Original Issue Date:November 05, 2026

Multiple vulnerabilities have been reported in MikroTik Routers, which could allow a remote attacker to bypass authentication, gain elevated privileges, execute arbitrary code, obtain sensitive information, or cause denial of service on the targeted system.

Target Audience:
All end-user organizations and individuals using MikroTik Routers.

Risk Assessment:
High risk of authentication bypass, remote code execution, privilege escalation, sensitive in-formation disclosure, denial-of-service.

Impact Assessment:
Potential for complete system compromise.

Software Affected

MikroTik RouterOS 6 versions prior to 6.49.21
MikroTik RouterOS 7.23.x versions prior to 7.23.6
MikroTik RouterOS 7.24.x versions prior to 7.24.3

Description

MikroTik RouterOS is a network operating system used in various networking devices.

Multiple vulnerabilities exist in MikroTik Routers due to improper authentication, improper en-forcement of security checks, argument injection, and memory handling issues. An attacker could exploit these vulnerabilities by sending a specially crafted request to the targeted system, such as through the SSH service, the WebFig interface, or the bandwidth-test service.

Successful exploitation of these vulnerabilities could allow a remote attacker to bypass au-thentication, gain elevated privileges, execute arbitrary code, obtain sensitive information, or cause denial of service on the targeted system.

Note: These vulnerabilities along with the SSH vulnerabilities CVE-2026-67279 and CVE-2026-86060 in combination, under the name "MikroTrick" are being actively exploited in the wild.

Solution

Apply appropriate updates as mentioned by the vendor:
https://mikrotik.com/supportsec/september-2026-vulnerability/

Vendor Information

MikroTik Routers
https://mikrotik.com/supportsec

References

https://mikrotik.com/supportsec/september-2026-vulnerability/
https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve/

CVE Name

CVE-2026-67276
CVE-2026-67277
CVE-2026-67278
CVE-2026-67279
CVE-2026-67281
CVE-2026-86060

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email:info@cert-in.org.in
Phone: +91-11-22902657

Postal Address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India

CURRENT ACTIVITIES Multiple Vulnerabilities in MikroTik Routers

CURRENT ACTIVITIES
Multiple Vulnerabilities in MikroTik Routers