# Mikrotik Routeros


- [CVE-2018-7445](https://insights.sbomify.com/CVE-2018-7445/): MikroTik RouterOS Stack-Based Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2026-86060](https://insights.sbomify.com/CVE-2026-86060/): MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command (critical 9.2, exploited in the wild)
- [CVE-2018-14847](https://insights.sbomify.com/CVE-2018-14847/): MikroTik Router OS Directory Traversal (critical 9.1, exploited in the wild)
- [CVE-2026-67277](https://insights.sbomify.com/CVE-2026-67277/): MikroTik RouterOS Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2026-67279](https://insights.sbomify.com/CVE-2026-67279/): Mikrotik RouterOS Improper Enforcement of Behavioral Workflow (medium 6.9, exploited in the wild)
- [CVE-2017-20149](https://insights.sbomify.com/CVE-2017-20149/): Memory corruption in n/a (critical 9.8)
- [CVE-2022-34960](https://insights.sbomify.com/CVE-2022-34960/): Path traversal in n/a (critical 9.8)
- [CVE-2026-67276](https://insights.sbomify.com/CVE-2026-67276/): SSH user impersonation possible in Mikrotik RouterOS (critical 9.2)
- [CVE-2023-30799](https://insights.sbomify.com/CVE-2023-30799/): MikroTik RouterOS Administrator Privilege Escalation (critical 9.1)
- [CVE-2022-45313](https://insights.sbomify.com/CVE-2022-45313/): Memory corruption in n/a (high 8.8)
- [CVE-2019-3976](https://insights.sbomify.com/CVE-2019-3976/): Path traversal in MikroTik RouterOS (high 8.8)
- [CVE-2018-1156](https://insights.sbomify.com/CVE-2018-1156/): Memory corruption in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/mikrotik/routeros/