Security Digest

MikroTik: known exploited vulnerabilities

3 MikroTik CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-09-25CVE-2026-67279MikroTik RouterOS
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
2026-09-28
2026-09-10CVE-2026-86060MikroTik RouterOS
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
2026-09-13
2026-09-10CVE-2026-67277MikroTik RouterOS
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
2026-09-13