CVE-2026-14227

The CVE-2026-14227 entry describes an API session-management vulnerability in MikroTik RouterOS when the API is enabled. The flaw allows an active session to retain its previous permission set after inactivity timeouts or user-group changes, meaning an authenticated user whose permissions have be...

MikroTik RouterOS and Cloud Hosted Router

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network...

Web interface for DNSmasq / Mikrotik - SQL Injection

Exploit for php platform in category web applications / + Credits: hyp3rlinx Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download: sourceforge.net/projects/dnsmasq-mikrotik-admin/?source=directory This is a very simple web interface for...