Vulnerability in MikroTik RouterOS

[ Description ]Official description

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund19 Oct 2026WID-SEC-2026-4042

  MikroTik RouterOS: Vulnerability allows denial of service Translated from German

  CVE-2026-112158

[ References ]References

• github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md
• vuldb.com/cve/CVE-2026-112158
• vuldb.com/submit/956852
• vuldb.com/vuln/422285
• vuldb.com/vuln/422285/cti