Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: MikroTik RouterOS — Release Notes Clear all filters
TI-2026-60337 CVE-2026-89028 · GHSA-2jvh-jvq5-35jq

MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX

Priority LOW 36

MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 Se…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00582 Published 2026-09-16 Fixed in 7.24.0 CWE-122
TI-2026-40892 CVE-2026-56719 · GHSA-w9p3-2qvw-6779

MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX

Priority LOW 34

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen f…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00393 Published 2026-09-16 Fixed in 7.24.0 CWE-125