en
Severity across 10 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 94 vulnerability records affecting RouterOS.
Among the 10 records analyzed by CyStack, 5 are High or Critical and 2 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86060SSH session privilege manipulation via a crafted username in Mikrotik RouterOS | Exploitation statusKEV | FixYes | Published09/05/2026 | SeverityCritical |
CVE-2026-67281Unauthenticated file read in Mikrotik RouterOS | Exploitation statusPublic exploit | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-67279SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS | Exploitation statusPublic exploit | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-67278TLS server impersonation possible in Mikrotik RouterOS | Exploitation statusPublic exploit | FixYes | Published09/05/2026 | SeverityMedium |
CVE-2026-67277Kernel memory disclosure and denial of service in MikroTik RouterOS btest service | Exploitation statusKEV | FixYes | Published09/05/2026 | SeverityHigh |
CVE-2026-67276SSH user impersonation possible in Mikrotik RouterOS | Exploitation statusPublic exploit | FixYes | Published09/05/2026 | SeverityCritical |
CVE-2026-14227Insufficient session expiration in MikroTik RouterOS | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-16347Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router | Exploitation statusNot known exploited | FixNot confirmed | Published07/28/2026 | SeverityHigh |
CVE-2025-42611Improper certificate validation in multiple RouterOS services | Exploitation statusNot known exploited | FixYes | Published05/05/2026 | SeverityMedium |
CVE-2026-7668MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds | Exploitation statusPublic exploit | FixNot confirmed | Published05/02/2026 | SeverityMedium |
CVE-2025-10948MikroTik RouterOS libjson.so print parse_json_element buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published09/25/2025 | SeverityHigh |
CVE-2025-6563Cross-site scripting via dst parameter in RouterOS WiFi hotspot | Exploitation statusPublic exploit | FixYes | Published07/03/2025 | SeverityMedium |
CVE-2025-6443Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published06/25/2025 | SeverityHigh |
CVE-2024-54952CVE-2024-54952 | Exploitation statusNot known exploited | FixNot confirmed | Published05/29/2025 | SeverityHigh |
CVE-2024-54772CVE-2024-54772 | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityMedium |
CVE-2023-32154Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/03/2024 | SeverityHigh |
CVE-2023-41570CVE-2023-41570 | Exploitation statusPublic exploit | FixNot confirmed | Published11/14/2023 | SeverityUnknown |
CVE-2023-30800MikroTik RouterOS Web Interface Heap Corruption | Exploitation statusPublic exploit | FixYes | Published09/07/2023 | SeverityHigh |
CVE-2023-30799MikroTik RouterOS Administrator Privilege Escalation | Exploitation statusPublic exploit | FixYes | Published07/19/2023 | SeverityCritical |
CVE-2020-20021CVE-2020-20021 | Exploitation statusPublic exploit | FixNot confirmed | Published07/12/2023 | SeverityUnknown |
CVE-2023-24094CVE-2023-24094 | Exploitation statusNot known exploited | FixNot confirmed | Published03/27/2023 | SeverityHigh |
CVE-2022-45315CVE-2022-45315 | Exploitation statusPublic exploit | FixYes | Published12/05/2022 | SeverityCritical |
CVE-2022-45313CVE-2022-45313 | Exploitation statusPublic exploit | FixNot confirmed | Published12/05/2022 | SeverityHigh |
CVE-2017-20149CVE-2017-20149 | Exploitation statusPublic exploit | FixNot confirmed | Published10/15/2022 | SeverityCritical |
CVE-2022-36522CVE-2022-36522 | Exploitation statusNot confirmed | FixNot confirmed | Published08/26/2022 | SeverityUnknown |
CVE-2022-34960CVE-2022-34960 | Exploitation statusNot confirmed | FixNot confirmed | Published08/25/2022 | SeverityUnknown |
CVE-2021-36613CVE-2021-36613 | Exploitation statusNot confirmed | FixNot confirmed | Published05/11/2022 | SeverityUnknown |
CVE-2021-36614CVE-2021-36614 | Exploitation statusNot confirmed | FixNot confirmed | Published05/11/2022 | SeverityUnknown |
CVE-2021-41987CVE-2021-41987 | Exploitation statusNot confirmed | FixNot confirmed | Published03/16/2022 | SeverityUnknown |
CVE-2020-22845CVE-2020-22845 | Exploitation statusNot confirmed | FixNot confirmed | Published02/28/2022 | SeverityUnknown |
CVE-2020-22844CVE-2020-22844 | Exploitation statusNot confirmed | FixNot confirmed | Published02/28/2022 | SeverityUnknown |
CVE-2020-20221CVE-2020-20221 | Exploitation statusNot confirmed | FixNot confirmed | Published07/21/2021 | SeverityUnknown |
CVE-2020-20262CVE-2020-20262 | Exploitation statusNot confirmed | FixNot confirmed | Published07/21/2021 | SeverityUnknown |
CVE-2020-20219CVE-2020-20219 | Exploitation statusNot confirmed | FixNot confirmed | Published07/21/2021 | SeverityUnknown |
CVE-2020-20248CVE-2020-20248 | Exploitation statusNot confirmed | FixNot confirmed | Published07/19/2021 | SeverityUnknown |
CVE-2020-20249CVE-2020-20249 | Exploitation statusNot confirmed | FixNot confirmed | Published07/19/2021 | SeverityUnknown |
CVE-2020-20230CVE-2020-20230 | Exploitation statusNot confirmed | FixNot confirmed | Published07/19/2021 | SeverityUnknown |
CVE-2020-20231CVE-2020-20231 | Exploitation statusNot confirmed | FixNot confirmed | Published07/14/2021 | SeverityUnknown |
CVE-2020-20252CVE-2020-20252 | Exploitation statusNot confirmed | FixNot confirmed | Published07/13/2021 | SeverityUnknown |
CVE-2020-20250CVE-2020-20250 | Exploitation statusNot confirmed | FixNot confirmed | Published07/13/2021 | SeverityUnknown |
CVE-2020-20217CVE-2020-20217 | Exploitation statusNot confirmed | FixNot confirmed | Published07/08/2021 | SeverityUnknown |
CVE-2020-20225CVE-2020-20225 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20216CVE-2020-20216 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20215CVE-2020-20215 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20213CVE-2020-20213 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20212CVE-2020-20212 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20211CVE-2020-20211 | Exploitation statusNot confirmed | FixNot confirmed | Published07/07/2021 | SeverityUnknown |
CVE-2020-20266CVE-2020-20266 | Exploitation statusNot confirmed | FixNot confirmed | Published05/19/2021 | SeverityUnknown |
CVE-2020-20264CVE-2020-20264 | Exploitation statusNot confirmed | FixNot confirmed | Published05/19/2021 | SeverityUnknown |
CVE-2020-20245CVE-2020-20245 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20246CVE-2020-20246 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20227CVE-2020-20227 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20220CVE-2020-20220 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20237CVE-2020-20237 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20236CVE-2020-20236 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20222CVE-2020-20222 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20214CVE-2020-20214 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20254CVE-2020-20254 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20253CVE-2020-20253 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2021 | SeverityUnknown |
CVE-2020-20265CVE-2020-20265 | Exploitation statusNot confirmed | FixNot confirmed | Published05/11/2021 | SeverityUnknown |
CVE-2020-20267CVE-2020-20267 | Exploitation statusNot confirmed | FixNot confirmed | Published05/11/2021 | SeverityUnknown |
CVE-2020-20218CVE-2020-20218 | Exploitation statusNot confirmed | FixNot confirmed | Published05/03/2021 | SeverityUnknown |
CVE-2020-20247CVE-2020-20247 | Exploitation statusNot confirmed | FixNot confirmed | Published05/03/2021 | SeverityUnknown |
CVE-2021-27221CVE-2021-27221 | Exploitation statusNot confirmed | FixNot confirmed | Published03/19/2021 | SeverityUnknown |
CVE-2021-3014CVE-2021-3014 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2019-16160CVE-2019-16160 | Exploitation statusNot confirmed | FixNot confirmed | Published10/07/2020 | SeverityUnknown |
CVE-2020-11881CVE-2020-11881 | Exploitation statusNot confirmed | FixNot confirmed | Published09/14/2020 | SeverityUnknown |
CVE-2020-10364CVE-2020-10364 | Exploitation statusNot confirmed | FixNot confirmed | Published03/23/2020 | SeverityUnknown |
CVE-2018-5951CVE-2018-5951 | Exploitation statusNot confirmed | FixNot confirmed | Published03/02/2020 | SeverityUnknown |
CVE-2019-3981CVE-2019-3981 | Exploitation statusNot confirmed | FixNot confirmed | Published01/14/2020 | SeverityUnknown |
CVE-2019-3977CVE-2019-3977 | Exploitation statusNot confirmed | FixNot confirmed | Published10/28/2019 | SeverityUnknown |
CVE-2019-3979CVE-2019-3979 | Exploitation statusNot confirmed | FixNot confirmed | Published10/28/2019 | SeverityUnknown |
CVE-2019-3978CVE-2019-3978 | Exploitation statusNot confirmed | FixNot confirmed | Published10/28/2019 | SeverityUnknown |
CVE-2019-3976CVE-2019-3976 | Exploitation statusNot confirmed | FixNot confirmed | Published10/28/2019 | SeverityUnknown |
CVE-2019-15055CVE-2019-15055 | Exploitation statusNot confirmed | FixNot confirmed | Published08/26/2019 | SeverityUnknown |
CVE-2019-13954CVE-2019-13954 | Exploitation statusNot confirmed | FixNot confirmed | Published07/26/2019 | SeverityUnknown |
CVE-2019-13955CVE-2019-13955 | Exploitation statusNot confirmed | FixNot confirmed | Published07/26/2019 | SeverityUnknown |
CVE-2019-13074CVE-2019-13074 | Exploitation statusNot confirmed | FixNot confirmed | Published07/03/2019 | SeverityUnknown |
CVE-2019-3943CVE-2019-3943 | Exploitation statusNot confirmed | FixNot confirmed | Published04/10/2019 | SeverityUnknown |
CVE-2019-3924CVE-2019-3924 | Exploitation statusPublic exploit | FixNot confirmed | Published02/20/2019 | SeverityUnknown |
CVE-2018-1156CVE-2018-1156 | Exploitation statusNot confirmed | FixNot confirmed | Published08/23/2018 | SeverityUnknown |
CVE-2018-1159CVE-2018-1159 | Exploitation statusNot confirmed | FixNot confirmed | Published08/23/2018 | SeverityUnknown |
CVE-2018-1158CVE-2018-1158 | Exploitation statusNot confirmed | FixNot confirmed | Published08/23/2018 | SeverityUnknown |
CVE-2018-1157CVE-2018-1157 | Exploitation statusNot confirmed | FixNot confirmed | Published08/23/2018 | SeverityUnknown |
CVE-2018-14847CVE-2018-14847 | Exploitation statusKEV | FixNot confirmed | Published08/02/2018 | SeverityCritical |
CVE-2018-10066CVE-2018-10066 | Exploitation statusNot confirmed | FixNot confirmed | Published04/13/2018 | SeverityUnknown |
CVE-2018-7445CVE-2018-7445 | Exploitation statusKEV | FixNot confirmed | Published03/19/2018 | SeverityCritical |
CVE-2017-8338CVE-2017-8338 | Exploitation statusNot confirmed | FixNot confirmed | Published05/18/2017 | SeverityUnknown |
CVE-2017-7285CVE-2017-7285 | Exploitation statusPublic exploit | FixNot confirmed | Published03/29/2017 | SeverityUnknown |
CVE-2017-6444CVE-2017-6444 | Exploitation statusPublic exploit | FixNot confirmed | Published03/12/2017 | SeverityUnknown |
CVE-2017-6297CVE-2017-6297 | Exploitation statusNot confirmed | FixNot confirmed | Published02/27/2017 | SeverityUnknown |
CVE-2015-2350CVE-2015-2350 | Exploitation statusNot confirmed | FixNot confirmed | Published03/19/2015 | SeverityUnknown |
CVE-2012-6050CVE-2012-6050 | Exploitation statusPublic exploit | FixNot confirmed | Published11/27/2012 | SeverityUnknown |
CVE-2008-6976CVE-2008-6976 | Exploitation statusPublic exploit | FixNot confirmed | Published08/18/2009 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
