CVE-2026-84411

Vendor

MikroTik

Product

RouterOS

CVSS

9.8

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 29d ago

   The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before…

   The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to…

   CVSS 9.8 CVE-2026-84411 MikroTik
2. 28
   CISA advisory CISA 29 Sep 2026

   MikroTik RouterOS

   Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution or cause a denial of service. The following versions of MikroTik RouterOS are affected: RouterOS CVSS Vendor Equipment…

   CVSS 3.1 CVE-2026-84411 MikroTik