Vendor
MikroTik: actively exploited vulnerabilities
5 vulnerabilities in MikroTik products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on September 25, 2026: CVE-2026-67279 (RouterOS).
- 5 exploited vulnerabilities in the catalog
- 3 added in the last 12 months
- 0 used by ransomware
- 1 product affected
Affected products
- RouterOS5
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2026 3 vulnerabilities
-
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
-
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
-
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
2022 1 vulnerability
-
CVE-2018-7445MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
2021 1 vulnerability
-
CVE-2018-14847MikroTik Router OS Directory Traversal Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.