HIGHVulnerability
Verified
Global

CISA KEV: MikroTik RouterOS — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.

Analysis

MikroTik RouterOS contains a missing authenticaion for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-10. Remediation due: 2026-09-13.

Indicators of Compromise (1)

CVE (1)
CVE-2026-67277
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 10, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

Revolut gets green light to buy Argentinian bank

Revolut has received the regulatory go-ahead to acquire small Argentinian lender Banco Cetelem from BNP Paribas.

Finextra
MEDIUMVulnerabilityNEW

Singapore to train 80,000 FS sector employees in AI skills

Singapore's financial services sector has moved to prepare itself for the artificial intelligence era through the launch of an AI workforce co-lab and a commitment to train 80,000 employees in the technology.

Finextra
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-100886 — A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4...

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any wa

CVE-2026-100886
NIST NVD