CVE security advisories and vulnerability history for routeros by mikrotik.
101
Total CVEs
Published
5
In CISA KEV
Exploited in the wild
78
Public exploits
PoC or exploit code
7.2
Avg CVSS
2009–2026
Last updated
Overview
mikrotik routeros has 101 published CVE records since 2009, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 78 have a known public exploit. The average CVSS base score across scored CVEs is 7.2. Affected platforms include arm, ccr1009-7g-1c-1s+, ccr1009-7g-1c-1s+pc, ccr1009-7g-1c-pc, ccr1016-12g, ccr1016-12s-1s+.
Severity and exploitation
How the CVSS severity of mikrotik routeros's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical8
High35
Medium57
Low1
In CISA’s Known Exploited Vulnerabilities catalog
5
5 of mikrotik routeros's CVEs are confirmed exploited in the wild.
Public exploits
78
78 of mikrotik routeros's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every mikrotik routeros version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
6.48.81 CVE
6.49.91 CVE
Long-term 6.42.12 and below1 CVE
Stable 6.43.12 and below1 CVE
Testing 6.44beta75 and below1 CVE
Version ranges
< 6.4714 CVEs
6.44.6 <= v <= 6.44.66 CVEs
<= 6.44.55 CVEs
7.24 <= v < 7.24.25 CVEs
< 6.40.94 CVEs
< 6.42.74 CVEs
Common weakness types
The CWE weakness categories most often found in mikrotik routeros CVEs. Follow any weakness for its full explanation.
Common questions about mikrotik routeros vulnerabilities.
How many CVEs does mikrotik routeros have?
mikrotik routeros has 101 published CVE records since 2009.
How many mikrotik routeros CVEs are in CISA KEV?
Yes — 5 of mikrotik routeros's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for mikrotik routeros vulnerabilities?
Yes — 78 of mikrotik routeros's CVEs have a known public exploit.
Which versions of mikrotik routeros are affected?
140 distinct mikrotik routeros versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in mikrotik routeros CVEs?
mikrotik routeros's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-617 (Reachable Assertion).
How many critical mikrotik routeros vulnerabilities are there?
mikrotik routeros has 8 critical and 35 high-severity CVEs.
What is the average severity of mikrotik routeros CVEs?
The average CVSS base score across mikrotik routeros's scored CVEs is 7.2.
