Security2 hSeptember 30, 2026, 22:49

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

CISA is warning about CVE-2026-84411, a critical pre-authentication integer underflow in MikroTik RouterOS web management that allows remote code execution as root or denial of service with a single crafted request. Versions below 7.24 are affected.

BleepingComputer

Open source

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

CVE-2026-84411 is a pre-auth integer underflow in RouterOS web management
A single request can achieve root code execution or DoS
Versions below 7.24 are affected; update to 7.23+ recommended
No active exploitation observed so far

#MikroTik#CISA#RouterOS

CISA adds Microsoft SharePoint and MikroTik RouterOS flaws to KEV catalog

Security

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Security

Exposed Router Management: 8.09 Million RouterOS Assets and the 9,560 That Still Answer on SSH

Security

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

CISA adds Microsoft SharePoint and MikroTik RouterOS flaws to KEV catalog

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Exposed Router Management: 8.09 Million RouterOS Assets and the 9,560 That Still Answer on SSH

CVE-2026-8452 in Citrix NetScaler: SAML parsing overflow leads to pre-auth RCE