Skip to content
Threat Feed
Subscribe

Product

RouterOS

3 briefs RSS
high advisory

MikroTik RouterOS: WebFig session token replay vulnerability (CVE-2026-89035)

MikroTik RouterOS versions 7.24.5 and earlier contain a session token replay vulnerability in the WebFig interface that allows unauthenticated attackers to hijack administrative sessions.

RouterOS +1 authentication-bypass session-hijacking network-security cve-2026-89035
1t 2c updated
critical advisory

MikroTik RouterOS Authentication Bypass and RCE

The 'MikroTrick' campaign exploits vulnerabilities in the RouterOS SSH service to achieve unauthenticated remote code execution and administrative account persistence.

RouterOS +3 remote-code-execution authentication-bypass network-security mikrotrick
3t 2c
medium advisory

Multiple Vulnerabilities in MikroTik RouterOS

Multiple vulnerabilities in MikroTik RouterOS have been identified that allow a remote, authenticated attacker to trigger a denial of service condition and manipulate arbitrary files on the device.

RouterOS
1t