MikroTik
CVEs currently on EVULNABLE's Priority Feed for MikroTik, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 2 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 2 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 1 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 5 MikroTik CVEs in EVULNABLE's ranked feed.
#1 85 Immediate CVE-2018-14847 ExigentKEV since 2021 · listed over a yearCISA KEV MikroTik — MikroTik Router OS Directory Traversal Vulnerability KEV, EPSS 96.0%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.960.
#2 77 Urgent CVE-2018-7445 KEV since 2022 · listed over a yearCISA KEV MikroTik — MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability KEV, EPSS 60.8%
EVRS 77/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.608.
#3 75 Urgent CVE-2026-86060 CISA federal deadline · Overdue by 33 daysCISA KEV MikroTik — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability KEV, EPSS 6.4%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.064.
#4 75 Urgent CVE-2026-67277 CISA federal deadline · Overdue by 33 daysCISA KEV MikroTik — MikroTik RouterOS Missing Authentication for Critical Function Vulnerability KEV, EPSS 1.6%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.016.
#5 75 Urgent CVE-2026-67279 CISA federal deadline · Overdue by 18 daysCISA KEV MikroTik — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability KEV, EPSS 1.0%, added to KEV within the last 30 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.010.