Read the docs

MikroTik

Records109All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high40CVSS 7.0–8.9

Exploited now

MikroTik records in CISA KEV
TI-2026-47576 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability Priority CRITICAL 88KEV 2026-09-25TI-2026-47574 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability Priority CRITICAL 95KEV 2026-09-10TI-2026-58872 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability Priority CRITICAL 99KEV 2026-09-10TI-2018-05369 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2018-10669 MikroTik Router OS Directory Traversal Vulnerability Priority CRITICAL 98KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Routeros 88 records CRITICAL Winbox 3 records LOW Router Firmware 2 records MEDIUM Routerboard 1 record LOW

Records

3 records in Winbox · all components

TI-2020-04648 CVE-2020-5720 · GHSA-v9mj-82v8-f72w

Path traversal in MikroTik WinBox

Priority LOW 29

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01061 Published 2020-02-06 No fix listed CWE-22
TI-2020-04649 CVE-2020-5721 · GHSA-gqqr-qcv3-9xg2

Insufficiently protected credentials in MikroTik WinBox

Priority LOW 25

MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00382 Published 2020-04-15 No fix listed CWE-260
Open these records in search →