Exploited vulnerabilities
MikroTik
5 MikroTik vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months3
In ransomware campaigns0
Last addition25 September 2026
The vulnerabilities5
- 25 September 2026CVE-2026-67279RouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
- 10 September 2026CVE-2026-86060RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- 10 September 2026CVE-2026-67277RouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability
- 8 September 2022CVE-2018-7445RouterOSMikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
- 1 December 2021CVE-2018-14847RouterOSMikroTik Router OS Directory Traversal Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, MikroTik included.