Tag
low
advisory
MikroTik RouterOS: Persistent Privilege Escalation via mtget Stack Overflow (CVE-2026-89020)
1 TTP 1 CVEAn authenticated, low-privileged user can trigger a stack-based buffer overflow in the RouterOS mtget binary via a crafted TFTP fetch request to gain persistent administrative privileges.
RouterOS +1
vulnerability
privilege-escalation
network-device
1t
1c
critical
threat
Active Exploitation of MikroTik RouterOS via SSH
1 TTP 3 CVEsMultiple vulnerabilities in MikroTik RouterOS are being actively exploited in the wild, targeting internet-exposed SSH services to achieve full system compromise.
exploited
PoC
RouterOS +4
active-exploitation
network-security
1t
3c
updated
medium
advisory
MikroTik RouterOS SCEP Endpoint Out-of-Bounds Read Vulnerability (CVE-2026-7668)
2 rules 1 TTP 1 CVEMikroTik RouterOS 6.49.8 is vulnerable to an out-of-bounds read in the SCEP endpoint component, triggered by remote manipulation of the transactionID/messageType argument, potentially leading to denial of service or information disclosure.
RouterOS
cve
out-of-bounds read
2r
1t
1c