DeutschShown in its original language — a full translation is planned for a future version.
MikroTik RouterOS: Mehrere Schwachstellen
view advisory published 2026-09-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MikroTik RouterOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Denial of Service Zustand herbeizuführen und um die Kontrolle über betroffene Geräte zu übernehmen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86060US | critical9.8OT critical | KEV | ||
RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be ch… | ||||
| CVE-2026-67281US | high7.5 | Exploit | ||
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for fi… | ||||
| CVE-2026-67279US | medium6.5OT critical | KEV | ||
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session… | ||||
| CVE-2026-67278US | critical9.1 | — | ||
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its tr… | ||||
| CVE-2026-67277US | high8.2OT critical | KEV | ||
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 U… | ||||
| CVE-2026-67276US | high8.1OT critical | Exploit | ||
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the expo… | ||||
02
references
External citations — patches, advisories, analysis.
- CERT Polska Advisory vom 2026-09-05external
- GitHub Security Advisory GHSA-6425-cjxv-52gp vom 2026-09-06external
- GitHub Security Advisory GHSA-pqp3-gjgf-83cf vom 2026-09-06external
- MikroTik RouterOS September 2026 Vulnerability vom 2026-09-06external
- WID-SEC-W-2026-3193 - CSAF Versionself
- WID-SEC-2026-3193 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan