Skip to content
COOEY

FAIL › dossier

RouterOS

PRODUCT

· dossier confidence 40%

MikroTik's RouterOS has a history of critical vulnerabilities including unauthenticated remote file access and authenticated remote code execution via directory traversal flaws. These issues highlight a pattern of unpatched edge-device RCEs and directory traversal leading to arbitrary file read/write.

Failure events
7
Zero-days
0
RCEs
3
On KEV
5
Critical
2
Worst shame
85
PROFILE
CategorynetworkingWhat they doMikroTik develops RouterOS, a network operating system for routers, switches, and access points.Founded1997 Websitehttps://mikrotik.com ↗
SECURITY POSTURE

Demonstrates a pattern of critical remote code execution and directory traversal vulnerabilities in RouterOS, with unauthenticated remote file read/write and authenticated RCE via path traversal flaws.

Notable failures
  • CVE-2018-14847: unauthenticated remote file read/write via directory traversal in WinBox
  • CVE-2018-7445: authenticated remote code execution via path traversal
  • CVE-2018-14847: unauthenticated remote file read/write via directory traversal in WinBox
Patterns: repeated unpatched edge-device RCEs; directory traversal leading to arbitrary file read/write
FAILURE HISTORY · 7
DATEEVENTSEVSUMMARY
2026-09-25 CVE-2026-67279 high An unauthenticated client can exploit a behavioral workflow flaw in MikroTik RouterOS to execute arbitrary commands, which can be chained with CVE-2026-86060 for full remote code execution.
2026-09-10 CVE-2026-67277 high MikroTik RouterOS lacks authentication for the btest service, enabling kernel memory disclosure and denial of service.
2026-09-10 CVE-2026-86060 high MikroTik RouterOS allows attackers to escalate privileges by changing the trusted policy mask via an improper neutralization of argument delimiters.
2021-12-01 CVE-2018-14847 high MikroTik RouterOS 6.42 allows unauthenticated remote attackers to read arbitrary files and authenticated attackers to write arbitrary files via directory traversal in the WinBox interface.
2022-09-08 CVE-2018-7445 high MikroTik RouterOS CVE-2018-7445 exploited for code execution
2026-09-05 CVE-2026-86060 critical CVE-2026-86060 is a privilege escalation flaw in MikroTik RouterOS SSH login handling that allows changing the trusted policy mask via unauthenticated SSH sessions.
2026-09-05 CVE-2026-67278 critical MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures, enabling TLS impersonation and undermining SSH authentication.
DOSSIER SOURCES
Open questions: What is the current patching cadence for RouterOS vulnerabilities?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-30 04:22:29.157171+00:00