agentprime: mikrotik-routerosEvery new CVE for mikrotik-routeros.https://agentprime.io/CVE-2026-89035: MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-89035/https://agentprime.io/advisories/CVE-2026-89035/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 17:16:40 GMTCVEcriticalCVE-2026-112158: MikroTik RouterOS ipt_SAME.ko same_check integer overflowhttps://agentprime.io/advisories/CVE-2026-112158/https://agentprime.io/advisories/CVE-2026-112158/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 16:00:06 GMTCVECVE-2026-103903: MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalationhttps://agentprime.io/advisories/CVE-2026-103903/https://agentprime.io/advisories/CVE-2026-103903/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 10:37:23 GMTCVECVE-2026-84411: MikroTik RouterOS Integer Underflowhttps://agentprime.io/advisories/CVE-2026-84411/https://agentprime.io/advisories/CVE-2026-84411/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 22:09:48 GMTCVEcriticalCVE-2026-93345: MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRIhttps://agentprime.io/advisories/CVE-2026-93345/https://agentprime.io/advisories/CVE-2026-93345/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 17:07:49 GMTCVECVE-2026-89028: MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXhttps://agentprime.io/advisories/CVE-2026-89028/https://agentprime.io/advisories/CVE-2026-89028/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:12:02 GMTCVECVE-2026-56719: MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndXhttps://agentprime.io/advisories/CVE-2026-56719/https://agentprime.io/advisories/CVE-2026-56719/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 13:07:38 GMTCVECVE-2026-89021: MikroTik RouterOS Path Traversal via Container OCI/tar Image Extractionhttps://agentprime.io/advisories/CVE-2026-89021/https://agentprime.io/advisories/CVE-2026-89021/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 18:06:31 GMTCVECVE-2026-89020: MikroTik RouterOS Stack Buffer Overflow via TFTP URL Pathhttps://agentprime.io/advisories/CVE-2026-89020/https://agentprime.io/advisories/CVE-2026-89020/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 18:02:58 GMTCVECVE-2026-86060: SSH session privilege manipulation via a crafted username in Mikrotik RouterOShttps://agentprime.io/advisories/CVE-2026-86060/https://agentprime.io/advisories/CVE-2026-86060/CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 10 Sept 2026: it is known to be exploited. CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:59 GMTCVEcriticalKEVCVE-2026-67281: Unauthenticated file read in Mikrotik RouterOShttps://agentprime.io/advisories/CVE-2026-67281/https://agentprime.io/advisories/CVE-2026-67281/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:58 GMTCVECVE-2026-67279: SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2026-67279/https://agentprime.io/advisories/CVE-2026-67279/CVSS 6.9 (Medium). Critical: In CISA’s KEV catalogue since 25 Sept 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:57 GMTCVEcriticalKEVCVE-2026-67278: TLS server impersonation possible in Mikrotik RouterOShttps://agentprime.io/advisories/CVE-2026-67278/https://agentprime.io/advisories/CVE-2026-67278/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:57 GMTCVECVE-2026-67277: Kernel memory disclosure and denial of service in MikroTik RouterOS btest servicehttps://agentprime.io/advisories/CVE-2026-67277/https://agentprime.io/advisories/CVE-2026-67277/CVSS 8.8 (High). Critical: In CISA’s KEV catalogue since 10 Sept 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:56 GMTCVEcriticalKEVCVE-2026-67276: SSH user impersonation possible in Mikrotik RouterOShttps://agentprime.io/advisories/CVE-2026-67276/https://agentprime.io/advisories/CVE-2026-67276/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 20:00:55 GMTCVEcriticalCVE-2026-14227: Insufficient session expiration in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2026-14227/https://agentprime.io/advisories/CVE-2026-14227/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 17:39:59 GMTCVECVE-2026-16347: Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Routerhttps://agentprime.io/advisories/CVE-2026-16347/https://agentprime.io/advisories/CVE-2026-16347/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 19:59:29 GMTCVECVE-2025-42611: Improper certificate validation in multiple RouterOS serviceshttps://agentprime.io/advisories/CVE-2025-42611/https://agentprime.io/advisories/CVE-2025-42611/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 10:58:36 GMTCVECVE-2026-7668: MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-boundshttps://agentprime.io/advisories/CVE-2026-7668/https://agentprime.io/advisories/CVE-2026-7668/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 May 2026 20:00:15 GMTCVECVE-2025-10948: MikroTik RouterOS libjson.so print parse_json_element buffer overflowhttps://agentprime.io/advisories/CVE-2025-10948/https://agentprime.io/advisories/CVE-2025-10948/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 14:02:07 GMTCVECVE-2025-6563: Cross-site scripting via dst parameter in RouterOS WiFi hotspothttps://agentprime.io/advisories/CVE-2025-6563/https://agentprime.io/advisories/CVE-2025-6563/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Jul 2025 11:18:26 GMTCVECVE-2025-6443: Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-6443/https://agentprime.io/advisories/CVE-2025-6443/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 21:29:22 GMTCVECVE-2023-32154: Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2023-32154/https://agentprime.io/advisories/CVE-2023-32154/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 May 2024 01:56:37 GMTCVECVE-2023-30800: MikroTik RouterOS Web Interface Heap Corruptionhttps://agentprime.io/advisories/CVE-2023-30800/https://agentprime.io/advisories/CVE-2023-30800/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Sep 2023 15:43:54 GMTCVECVE-2023-30799: MikroTik RouterOS Administrator Privilege Escalationhttps://agentprime.io/advisories/CVE-2023-30799/https://agentprime.io/advisories/CVE-2023-30799/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Jul 2023 14:56:17 GMTCVEcriticalCVE-2019-3977: Download of code without integrity check in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2019-3977/https://agentprime.io/advisories/CVE-2019-3977/Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Oct 2019 21:34:37 GMTCVECVE-2019-3979: RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack.https://agentprime.io/advisories/CVE-2019-3979/https://agentprime.io/advisories/CVE-2019-3979/Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Oct 2019 21:33:25 GMTCVECVE-2019-3978: Missing authentication in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2019-3978/https://agentprime.io/advisories/CVE-2019-3978/Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Oct 2019 21:32:57 GMTCVECVE-2019-3976: Path traversal in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2019-3976/https://agentprime.io/advisories/CVE-2019-3976/Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Oct 2019 21:32:40 GMTCVECVE-2019-3943: Path traversal in MikroTik RouterOShttps://agentprime.io/advisories/CVE-2019-3943/https://agentprime.io/advisories/CVE-2019-3943/Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Apr 2019 20:01:00 GMTCVE