34 matches found
CVE-2026-89035
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts...
EUVD-2026-107400
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts...
CVE-2026-89035
MikroTik RouterOS versions through 7.24.5 are vulnerable to a session token replay authentication bypass in the WebFig interface. The root cause lies in the makeSessionKey function within libucrypto.so , which generates tokens using fixed salts that lack channel-specific or session-specific input...
CVE-2026-89035 MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts...
CVE-2026-89035 MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts...
PT-2026-120722
MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts...
Exploit for Path Traversal in Mikrotik Routeros
Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281- !/u...
MikroTik RouterOS Before 7.24 WebFig Integer Underflow
MikroTik RouterOS versions before 7.24 contain an unauthenticated integer underflow in WebFig HTTP request body handling. The included proof of concept demonstrates denial of service against the web management service. https://packetstorm.news/download/235629...
Exploit for CVE-2026-84411
CVE-2026-84411 — reproduction & PoC Pre-auth integer underflo...
WebFig RouterOS Code Execution
The vulnerability of the WebFig interface in the RouterOS operating system of MikroTik routers is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Exploit for CVE-2026-84411
CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Ex...
MikroTik RouterOS Path Traversal (CVE-2026-67281)
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file- serving path dereferences...
PT-2026-111241
Уязвимость интерфейса WebFig операционной системы RouterOS маршрутизаторов MikroTik связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код или вызвать отказ в обслуживании...
MikroTik RouterOS WebFig Privilege Escalation
The vulnerability in the WebFig web interface of the MikroTik RouterOS operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to increase their privileges and gain unauthorized access to protected information...
MikroTik RouterOS 7.20 < 7.23.4 / 7.24.x < 7.24.2 WebFig Unauthenticated File Read (CVE-2026-67281)
According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.20 prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by an information disclosure vulnerability. RouterOS WebFig contains an unauthenticated file-read vulnerabilit...
CVE-2026-67281
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2026-67281
MikroTik RouterOS WebFig is affected by an unauthenticated file-read vulnerability in the /jsproxy path. The root cause is a stale uninitialized principal pointer retained by a newly allocated session, which an attacker can exploit by preparing the allocator and supplying parent-directory compone...
EUVD-2026-72028
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...
CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...