CVE-2026-67277

MikroTik RouterOS is vulnerable in its btest service , which accepts a "related" connection before the primary session completes authentication. An unauthenticated client can initiate an IPv4 UDP test with random-data=false, causing transmission of an uninitialized kernel buffer tail (memory disc...