IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.8Crítica

CVE-2026-84411MikroTik RouterOS Integer Underflow

MikroTik RouterOS Publicada: (hace 1 mes)

Descripción

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.

Debilidad (CWE): CWE-191

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
MikroTik RouterOS < 7.24, fixed 7.24

Referencias y parches

CVE recientes del mismo producto — MikroTik RouterOS

6.5Media
CVE-2026-112158

MikroTik RouterOS ipt_SAME.ko same_check integer overflow

MikroTik RouterOS

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 …