MikroTik RouterOS 6.x < 6.49.21 / 7.0.x < 7.23.4 / 7.24.x < 7.24.2 Multiple Vulnerabilities

Language:

Version 1.6 Sep 26, 2026, 7:34 PM CISA reference Plugin Feed: 202609261934
Version 1.5 Sep 26, 2026, 2:30 AM CISA reference Plugin Feed: 202609260230
Version 1.4 Sep 14, 2026, 1:09 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2026-67277" to "CVE-2026-86060") CVSSv3 score source (changed from "CVE-2026-86060" to none) Plugin Feed: 202609141309
Version 1.3 Sep 11, 2026, 9:51 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202609112151
Version 1.2 Sep 11, 2026, 3:58 AM CISA reference CVSS metrics ("Cvssv4 score" set to 9.2) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202609110358
Version 1.1 Sep 10, 2026, 10:27 PM New Plugin Feed: 202609102227

* Changelogs are generally available for changes made after Nov 1, 2022