CISA Warns of Critical Pre-Auth RCE Flaw in MikroTik RouterOS
ID: 0f2627cd-087a-53bf-bc38-1f92cd8ead04
STIX ID: report--0f2627cd-087a-53bf-bc38-1f92cd8ead04
Feed Name: CosmicBytez Labs
Threat Score
**CISA warns of CVE-2026-84411, a critical pre-auth integer-underflow in MikroTik RouterOS Webfig that allows unauthenticated attackers to achieve root remote code execution or cause denial-of-service with a single crafted HTTP request; RouterOS versions earlier than 7.24 are affected, fixes are available in 7.24.4/7.23.7, and administrators are urged to patch, disable or restrict web management access, inventory devices, and monitor for anomalous behavior.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.