Browse / CVEs / CVE-2026-67279
CVE-2026-67279· mikrotik / routeros· CWE-841
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Exploited in the wild. Listed by CISA on 2026-09-25; known to be used by ransomware.
2.3%likelihood of exploitation, next 30 days
83%of all CVEs are less likely
Nonecheck to confirm it
Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from