Threats tagged 'ghsa-fqc2-7xh3-488w'

A high-severity vulnerability (CVE-2026-7668) exists in MikroTik RouterOS 6.49.8 affecting the SCEP Endpoint component. The flaw involves an out-of-bounds read caused by manipulation of the transactionID/messageType arguments in the ASN1_STRING_data function. The vulnerability can be exploited remotely, and public exploit code is available. The vendor has not responded to the disclosure, and no patch information is provided.