CERT24Remote Code Execution Vulnerability in MikroTik RouterOSLoading data…
CERT24Threat Observatory
Period

Remote Code Execution Vulnerability in MikroTik RouterOS

The CISA bulletin dated September 29 and updated September 30 covers RouterOS versions below 7.24. A specially crafted HTTP request to the web management interface can, without authentication, lead to code execution with root privileges or denial of service. CVE-2026-84411 has a CVSS score of 9.8. No known public exploitation has been reported so far.

← Back to intelligence

Remote Code Execution Vulnerability in MikroTik RouterOS

The CISA bulletin dated September 29 and updated September 30 covers RouterOS versions below 7.24. A specially crafted HTTP request to the web management interface can, without authentication, lead to code execution with root privileges or denial of service. CVE-2026-84411 has a CVSS score of 9.8. No known public exploitation has been reported so far.