Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-84411: MikroTik RouterOS lets attackers run code via web login page
CVE-2026-84411 · published 16 days ago
Summary
The web management page of certain MikroTik RouterOS versions can be tricked with a specially crafted request, even before a user logs in. This could let an attacker take full control of the router or make it stop working. Update the router firmware to the latest release or disable the web management interface until you can apply the update.
What to do
- Update mikrotik routeros to version 7.24 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mikrotik | routeros | < 7.24 |
Original advisory text
MikroTik RouterOS Integer Underflow
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.3
Critical
Type
CWE-191Integer Underflow (Wrap or Wraparound)
Timeline
Published2 Oct 2026
Updated15 Oct 2026
First seen2 Oct 2026
Track software like this
Free during beta