CVE-2026-88464: MikroTik RouterOS: stack buffer overflow vulnerability has been identified in the SNMP service of RouterOS (the service behind /snmp, listening on UDP port 161)
This MikroTik advisory covers CVE-2026-88464 in MikroTik RouterOS.
- CVE-2026-88464
Key facts
- CISA KEV
- Not listed (catalogue checked )
- Affected
- 7.20
- Fixed in
- 7.24
- Source published
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A stack buffer overflow vulnerability has been identified in the SNMP service of RouterOS (the service behind /snmp, listening on UDP port 161). A single specially crafted SNMP request - version 1 or 2c - that carries an OID with many large sub-identifiers can crash the SNMP process.
The request does not need a login: only a valid community string is required, and the default public community is accepted from any address. The issue has been assigned CVE-2026-88464.
Who is affected: RouterOS versions 7.20 and up to the fixed releases listed below. The vulnerable code was introduced in RouterOS 7.20; RouterOS 6 and versions before 7.20 are not affected.
To trigger the issue, the SNMP service must be enabled and reachable by the attacker - from the local network, or from the internet if SNMP is exposed on the WAN. SNMP is not enabled by default.
Although the public report describes a crash, we treat this issue seriously. This issue is fixed in: 7.24 (stable).
7.23.3 (long-term). Users are advised to upgrade to one of these versions or any later release.
Until you upgrade, disable SNMP if you do not use it, or restrict it to trusted addresses and make sure UDP port 161 is not reachable from untrusted networks. MikroTik always recommends keeping RouterOS devices up to date and using a strong firewall to limit exposure from untrusted networks.
Text from the source record.
How to fix CVE-2026-88464
Upgrade to a fixed release named by MikroTik:
- 7.24
Vendor guidance
- Users are advised to upgrade to one of these versions or any later release.
- MikroTik always recommends keeping RouterOS devices up to date and using a strong firewall to limit exposure from untrusted networks.
Workarounds
- Until you upgrade, disable SNMP if you do not use it, or restrict it to trusted addresses and make sure UDP port 161 is not reachable from untrusted networks.
End-of-life dates for MikroTik RouterOS
More MikroTik advisories
CVE-2026-98432Nov 3, 2026MikroTik RouterOS: memory handling vulnerability has been identified in the Linux kernelCVE-2026-89020Sep 14, 2026MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-basedCVE-2026-86060Sep 5, 2026SSH session privilege manipulation via a crafted username in Mikrotik RouterOSCVE-2026-67281Sep 5, 2026Unauthenticated file read in Mikrotik RouterOSCVE-2026-67279Sep 5, 2026SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOSCVE-2026-67277Sep 5, 2026Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
Get an email when MikroTik RouterOS publishes the next one.
See MikroTik RouterOS's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future MikroTik CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
