MikroTik security advisories, May 2026

Every MikroTik security advisory published in May 2026, from MikroTik Security Announcements + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 1
Critical: 0
High: 1
In CISA KEV: 0
CVEs: 1

MikroTik advisories published in May 2026

May 8, 2026
High [CVE-2024-27686] Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP port 445
High7.5

Get an email when MikroTik publishes the next one.

See MikroTik's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about MikroTik

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.