---
title: "MikroTik: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/mikrotik/
description: "Every MikroTik vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-25
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# MikroTik: known exploited vulnerabilities

- 2026-09-25 [CVE-2026-67279](https://erroneo.us/security/cve/CVE-2026-67279/index.md) MikroTik RouterOS: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (due 2026-09-28; ransomware: Unknown)
- 2026-09-10 [CVE-2026-86060](https://erroneo.us/security/cve/CVE-2026-86060/index.md) MikroTik RouterOS: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (due 2026-09-13; ransomware: Unknown)
- 2026-09-10 [CVE-2026-67277](https://erroneo.us/security/cve/CVE-2026-67277/index.md) MikroTik RouterOS: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (due 2026-09-13; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/mikrotik/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt