MikroTik security advisories, September 2026

Every MikroTik security advisory published in September 2026, from MikroTik Security Announcements + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 8
Critical: 2
High: 3
In CISA KEV: 3
CVEs: 8

MikroTik advisories published in September 2026

Sep 14, 2026
High [CVE-2026-89020] MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 507 bytes or more to the /tool fetch command; the first write outside the 528-byte buffer occurs at 505 bytes
High8.7
Sep 14, 2026
Medium [CVE-2026-89021] MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths
Medium6.9
Sep 5, 2026
Critical [CVE-2026-86060] SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
Critical9.2ExploitedCISA KEV
Sep 5, 2026
Critical [CVE-2026-67276] SSH user impersonation possible in Mikrotik RouterOS
Critical9.2
Sep 5, 2026
High [CVE-2026-67281] Unauthenticated file read in Mikrotik RouterOS
High8.7
Sep 5, 2026
High [CVE-2026-67277] Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
High8.8ExploitedCISA KEV
Sep 5, 2026
Medium [CVE-2026-67279] SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
Medium6.9ExploitedCISA KEV
Sep 5, 2026
Medium [CVE-2026-67278] MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication
Medium6.3

Get an email when MikroTik publishes the next one.

See MikroTik's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about MikroTik

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.