RouterOS 6 vulnerabilities
3 advisories affect MikroTik RouterOS 6, 3 already exploited by attackers. Latest: September 25, 2026.
Running RouterOS 6 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on RouterOS 6 alerts
Turn on RouterOS 6 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-67279 · September 25, 2026 | Medium 6.5 Exploited | from 6.0.0 to 6.49.21 (excluded) Fixed in 6.49.21 |
| MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CVE-2026-86060 · September 10, 2026 | Critical 9.8 Exploited | from 6.0.0 to 6.49.21 (excluded) Fixed in 6.49.21 |
| MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-67277 · September 10, 2026 | High 8.2 Exploited | from 6.0.0 to 6.49.21 (excluded) Fixed in 6.49.21 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.