Vendor
MikroTik
As of , 5 MikroTik vulnerabilities are on CISA's list of exploited vulnerabilities; 3 were added in 2026. Patch first: CVE-2026-86060.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2026-86060Improper Neutralization of Argument Delimiters in a Command | MikroTik RouterOS | Patch nowForensic triage required by CISA | 0.06 | ||
| 2 | CVE-2026-67279Improper Enforcement of Behavioral Workflow | MikroTik RouterOS | Patch nowListed in the last 14 days | 0.01 | ||
| 3 | CVE-2018-14847Router OS Directory Traversal | MikroTik RouterOS | Patch this weekMetasploit module; EPSS 0.96 | 0.96 | ||
| 4 | CVE-2018-7445Stack-Based Buffer Overflow | MikroTik RouterOS | Patch this weekEPSS 0.61 | 0.61 | ||
| 5 | CVE-2026-67277Missing Authentication for Critical Function | MikroTik RouterOS | Patch soon | 0.02 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 1 |
| 2022 | 1 |
| 2023 | none |
| 2024 | none |
| 2025 | none |
| 2026 | 3 |