RouterOS

Critical MikroTik RouterOS Flaw CVE-2026-84411 Allows Unauthenticated Root RCE MikroTik RouterOS vulnerability CVE-2026-84411, an unauthenticated integer underflow in the web management service enabling root remote code execution

MikroTik RouterOS vulnerability CVE-2026-84411, an unauthenticated integer underflow in the web management service enabling root remote code execution

Critical MikroTik RouterOS Flaw CVE-2026-84411 Allows Unauthenticated Root RCE

Do Son September 29, 2026

TL;DR CISA published advisory ICSA-26-272-06 on September 29, 2026, for a critical MikroTik RouterOS vulnerability, CVE-2026-84411. A...

MikroTrick PoC: RouterOS Admin Rights Exploited In Wild MikroTik RouterOS MikroTrick vulnerability chain exploited in the wild for full administrative privileges via SSH, with public PoC exploit code

MikroTik RouterOS MikroTrick vulnerability chain exploited in the wild for full administrative privileges via SSH, with public PoC exploit code

MikroTrick PoC: RouterOS Admin Rights Exploited In Wild

Do Son September 7, 2026

CERT Polska confirmed active attacks against internet-facing MikroTik RouterOS devices on September 5, 2026. Attackers chain two...

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint

Do Son September 5, 2026

Speed becomes vital when a manufacturer conceals vulnerability details. Consequently, rapid patching eclipses the need to understand...

MikroTik RouterOS Flaw CVE-2026-16347 Helps Attackers Gain Unauthorized System Access MikroTik RouterOS vulnerability CVE-2026-16347 enabling brute-force attacks and unauthorized system access

MikroTik RouterOS vulnerability CVE-2026-16347 enabling brute-force attacks and unauthorized system access

MikroTik RouterOS Flaw CVE-2026-16347 Helps Attackers Gain Unauthorized System Access

Do Son August 1, 2026

CVE-2026-16347 lets attackers brute-force MikroTik RouterOS logins for unauthorized system access. Rated CVSS 8.8, with no fix...

Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig MikroTik HTTP Credential Leak, WebFig MitM CVE-2025-61481

MikroTik HTTP Credential Leak, WebFig MitM CVE-2025-61481

Critical MikroTik Flaw (CVE-2025-61481, CVSS 10.0) Exposes Router Admin Credentials Over Unencrypted HTTP WebFig

Do Son October 29, 2025

A newly disclosed vulnerability, CVE-2025-61481, rated a maximum CVSS score of 10.0, affects MikroTik RouterOS (v7.14.2) and...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88779CVSS 8.7
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
Admin intel📅 Updated: Oct 4, 2026
CVE-2026-102490CVSS 8.5
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-102489CVSS 8.7
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
CVE-2026-100382CVSS 10.0
Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
Admin intel📅 Updated: Oct 1, 2026
CVE-2026-104286CVSS 9.8
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
CISA KEV📅 Added to KEV: Oct 1, 2026
CVE-2026-76504CVSS 9.8
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026

CVE-2026-105218CVSS 9.1
gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
📅 Updated: Oct 4, 2026
CVE-2026-105216CVSS 9.1
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
📅 Updated: Oct 4, 2026
CVE-2026-105086CVSS 9.3
WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
📅 Updated: Oct 4, 2026
CVE-2026-105089CVSS 9.3
WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
📅 Updated: Oct 4, 2026
CVE-2026-82042CVSS 9.3
UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
📅 Updated: Oct 4, 2026
CVE-2026-105215CVSS 9.3
ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
📅 Updated: Oct 4, 2026
CVE-2026-105211CVSS 9.2
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
📅 Updated: Oct 4, 2026
CVE-2026-105209CVSS 9.3
ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
📅 Updated: Oct 4, 2026