Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:mikrotik:routeros:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

CVE-2026-93345: Improper Input Validation in MikroTik RouterOS BGP Service

An unauthenticated, on-path attacker can trigger a denial-of-service condition in MikroTik RouterOS by sending malformed BGP UPDATE packets with out-of-bounds prefix-lengths.

RouterOS
1t 1c
critical threat

Active Exploitation of MikroTik RouterOS via SSH

Multiple vulnerabilities in MikroTik RouterOS are being actively exploited in the wild, targeting internet-exposed SSH services to achieve full system compromise.

exploited PoC RouterOS +4 active-exploitation network-security
1t 3c updated