Skip to content
COOEY

FAIL › dossier

MikroTik

VENDOR

· dossier confidence 20%

MikroTik provides RouterOS for network infrastructure but has demonstrated significant security weaknesses through multiple high-severity vulnerabilities in RouterOS, including remote code execution and directory traversal flaws that require active patching and user vigilance.

Failure events
7
Zero-days
0
RCEs
3
On KEV
5
Critical
2
Worst shame
85
PROFILE
CategorynetworkingWhat they doMikroTik develops RouterOS, a network operating system for routers and switches. Websitehttps://mikrotik.com ↗
SECURITY POSTURE

MikroTik has a history of high-severity vulnerabilities in RouterOS, including directory traversal and remote code execution flaws, indicating gaps in secure development and patching cycles.

Notable failures
  • CVE-2018-14847: directory traversal RCE in WinBox
  • CVE-2018-7445: remote code execution in RouterOS
Patterns: unpatched edge-device RCEs; directory traversal in management interfaces
FAILURE HISTORY · 7
DATEEVENTSEVSUMMARY
2026-09-25 CVE-2026-67279 high An unauthenticated client can exploit a behavioral workflow flaw in MikroTik RouterOS to execute arbitrary commands, which can be chained with CVE-2026-86060 for full remote code execution.
2026-09-10 CVE-2026-67277 high MikroTik RouterOS lacks authentication for the btest service, enabling kernel memory disclosure and denial of service.
2026-09-10 CVE-2026-86060 high MikroTik RouterOS allows attackers to escalate privileges by changing the trusted policy mask via an improper neutralization of argument delimiters.
2021-12-01 CVE-2018-14847 high MikroTik RouterOS 6.42 allows unauthenticated remote attackers to read arbitrary files and authenticated attackers to write arbitrary files via directory traversal in the WinBox interface.
2022-09-08 CVE-2018-7445 high MikroTik RouterOS CVE-2018-7445 exploited for code execution
2026-09-05 CVE-2026-86060 critical CVE-2026-86060 is a privilege escalation flaw in MikroTik RouterOS SSH login handling that allows changing the trusted policy mask via unauthenticated SSH sessions.
2026-09-05 CVE-2026-67278 critical MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures, enabling TLS impersonation and undermining SSH authentication.
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
CVE-2018-14847 exposed unauthenticated file read/write via directory traversal in WinBox, allowing plain-text password disclosure; high CVSS 9.1 severity with no user interaction required, indicating
cooey ↗severe-fallout-0.80
NVD confirms unauthenticated remote file read/write via directory traversal in WinBox, allowing arbitrary file access and password disclosure; severe vulnerability with high CVSS score.
"MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface."
sploitus.com ↗severe-fallout-0.90
PoC exploit demonstrates arbitrary file read exposing plain-text passwords; high CVSS 9.1 severity with no privileges required, indicating severe fallout for MikroTik's security.
"Arbitrary file read in WinBox (Mikrotik RouterOS) exposes plain text passwords."
xposedornot.com ↗severe-fallout+0.00
No direct mention of CVE-2018-14847 or MikroTik; source is a general data breach directory without specific commentary on the vulnerability.
NIST ↗severe-fallout+0.00
NVD official site with no specific commentary on CVE-2018-14847 or MikroTik; neutral administrative page.
www.comparitech.com ↗severe-fallout+0.00
No mention of CVE-2018-14847 or MikroTik; source is a ransomware attack map with no relevant commentary.
cvefeed.io ↗severe-fallout+0.00
No mention of CVE-2018-14847 or MikroTik; source is a CVE news feed homepage with no specific commentary.
DOSSIER SOURCES
Open questions: MikroTik's current patching SLA · MikroTik's security certification status
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-29 04:13:22.178316+00:00