VulnerabilityPublished 30 Sep 2026

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Source Bleeping Computer

Severity

Critical

Rated Critical by Bleeping Computer

Data as of 30 Sep 2026, 16:48 UTC

What to do

AI-suggested

Until an official fix is available, monitor vendor communications closely for updates and apply patches promptly once released.

Description

CISA has issued a warning about a critical vulnerability in MikroTik RouterOS that allows for remote code execution or denial-of-service conditions without authentication. This flaw poses a significant risk to affected systems if exploited. No specific affected versions or patch information are currently provided.

Impact

Successful exploitation of this vulnerability could lead to full remote compromise of MikroTik RouterOS devices or disrupt their availability through denial-of-service. This represents a critical security risk for organizations using affected MikroTik RouterOS versions.

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has alerted users to a critical pre-authentication remote code execution vulnerability in MikroTik RouterOS. This vulnerability could allow attackers to execute arbitrary code remotely or cause a denial-of-service condition on affected devices. Details such as affected versions, exploitation methods, or available patches have not been disclosed in the provided information.

References

bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 30 Sep 2026, 16:48 UTC

References

Community reviews

Related threats