by Kastro
Paper/Archive/CVE-2026-84411

CVE-2026-84411

MikroTik RouterOS — MikroTik RouterOS Integer Underflow

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.5.585 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.

Affected

ProductAffectedFixed inSource
RouterOS< 7.247.24CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refmikrotik.com/downloadrefcisa.gov/news-events/ics-advisories/icsa-26-272-06refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-06.json