Vendor
Mikrotik
- CVEs tracked · all time
- 9
- in CISA KEV · all time
- 3
- articles · since 11 Sep
- 6
- articles · all time
- 14
6 articles since 11 Sep; 2 CISA notices, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Mon 14 Sep | 1 |
| Thu 24 Sep | 1 |
| Fri 25 Sep | 3 |
| Tue 29 Sep | 1 |
Products: Cloud Hosted Router, RouterOS, RouterOS-TFTP
CVEs
9 CVEsCVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityCVSS9.2CriticalExploited6.4%EPSS8articles
CVE-2026-67279Mikrotik RouterOS Improper Enforcement of Behavioral Workflow VulnerabilityCVSS6.9MediumExploited2.3%EPSS6articles
CVE-2026-67277MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityCVSS8.8HighExploited1.6%EPSS3articles
CVE-2026-16347Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted RouterCVSS8.8High–Not in KEV0.4%EPSS1article
CVE-2024-2169Implementations of UDP application protocols are susceptible to network loops and denial of serviceCVSS7.5High–Not in KEV5.4%EPSS1article
- CISA Warns of Critical Unauthenticated RCE in MikroTik RouterOSSecurityOnline
- CISA Warns of Active MikroTik RouterOS Attacks and SharePoint FlawSecurity Affairs
- CISA Flags Actively Exploited SharePoint and MikroTik FlawsCISA · official notice
- Actively Exploited MikroTik RouterOS Flaw Enables Unauthenticated AttacksCISA · official notice
- MikroTik Routers Hacked Using Dual Flaws to Bypass PasswordsSecurity Affairs
- CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik FlawsSecurityOnline
- CISA Flags Actively Exploited MikroTik RouterOS Flaw Exposing KernelsCISA · official notice
- CISA Flags Actively Exploited Critical MikroTik RouterOS FlawCISA · official notice
- MikroTik Patches Exploited RouterOS Flaws in MikrTrick Attack ChainSecurityWeek
- MikroTik Routers Face Takeover Risk From Active MikroTrick AttacksMalwarebytes
- MikroTik RouterOS Attacks Exploit MikroTrick Flaws for Full ControlSecurityOnline
- MikroTik RouterOS Zero Day Chain Gives Attackers Admin ControlSecurity Affairs
- MikroTik routers hit by critical CVE-2026-16347 bruteforce flawSecurityOnline
- Loop DoS attack uses CVE-2024-2169, endangering 300k hostsBleepingComputer · first in our coverage