RO
Product
RouterOS
On CISA KEVExploited in the wild
103
CVEs
5
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 38Medium 53Low 1
Watch
Add RouterOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14227 | 4.9 | Jul 30 | Insufficient session expiration in MikroTik RouterOS Affected: All versions |
| CVE-2025-6563 | 4.8 | Jul 3 | Cross-site scripting via dst parameter in RouterOS WiFi hotspot Affected: before 7.19.2 |
| CVE-2026-89020 | 4.3 | Sep 14 | MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Affected: before 7.23.4; 7.24.0 before 7.24.2 |