CVE-2025-56566

MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage (SPI flash). An attacker with physical access to the device can extract this material via an SPI flash dump, without authenticating to the device or knowing the administ...