Firetruck

CVE-2026-67277

KEV
Updated Sep 11, 2026 · PUBLISHED
View KEV entry →

Description

MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
RouterOSMikrotik / RouterOS>= 6.0.0, < 6.49.21affected
RouterOSMikrotik / RouterOS>= 7.0.0, < 7.23.4affected
RouterOSMikrotik / RouterOS>= 7.24, < 7.24.2affected