CVE-2026-103903

A high-severity incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with low-privilege credentials to escalate privileges. The flaw exists because the stage-one EC-SRP challenge is verified against the attacker's acco...