Firetruck

CVE-2026-67279

KEV
Updated Sep 26, 2026 · PUBLISHED
View KEV entry →

Description

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
RouterOSMikrotik / RouterOS>= 6.0.0, < 6.49.21affected
RouterOSMikrotik / RouterOS>= 7.0.0, < 7.23.4affected
RouterOSMikrotik / RouterOS>= 7.24, < 7.24.2affected