10 matches found
CVE-2026-89028
MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...
CVE-2026-56719
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...
CVE-2026-89028
MikroTik RouterOS versions before 7.24 are affected by a heap memory corruption vulnerability in the userspace SMB daemon. The root cause is an integer underflow triggered by a crafted uniPwdLen field in the SMB1 SessionSetupAndX handler, which causes an oversized copy length to be used when copy...
CVE-2026-89028 MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX
MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...
CVE-2026-89028 MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX
MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...
EUVD-2026-80702
MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in the userspace SMB daemon that allows remote attackers to corrupt adjacent heap memory by supplying a crafted uniPwdLen value in the SMB1 SessionSetupAndX handler. An attacker can send a malformed SMB1 request with a...
CVE-2026-56719
MikroTik RouterOS versions prior to 7.24 are affected by an out-of-bounds read in the userspace SMB daemon . The flaw is triggered by a crafted uniPwdLen field in a minimal SMB1 SessionSetupAndX frame, and the read occurs in the SessionSetupAndX handler before any credential validation , meaning ...
EUVD-2026-80701
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...
CVE-2026-56719 MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...
CVE-2026-56719: Out-of-bounds Read
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read...