Known vulnerabilities in MikroTik RouterOS 7.22rc3

Vendor: MikroTik
Version: 7.22rc3
Software CPE: cpe:2.3:h:mikrotik:mikrotik_routeros:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting MikroTik RouterOS version 7.22rc3 MikroTik RouterOS 7.22rc3 is affected by 8 vulnerabilities: 2 critical, 3 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU156090 - Incorrect Authorization
CVE-2026-103903
CWE-863 Low
No
No
7.23.8 17.10.2026 SB2026101701
#VU156089 - Integer overflow
CVE-2026-84411
CWE-190 Critical
Public exploit available
Exploited
6.49.23, 7.23.8 17.10.2026 SB2026101701
#VU147168 - Improper Verification of Cryptographic Signature
CVE-2026-67278
CWE-347 Medium
No
No
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616
#VU147169 - Improper Enforcement of Behavioral Workflow
CVE-2026-67279
CWE-841 High
No
Exploited
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616
#VU147170 - Access of Uninitialized Pointer
CVE-2026-67281
CWE-824 Medium
No
No
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616
#VU147171 - Argument Injection or Modification
CVE-2026-86060
CWE-88 High
Public exploit available
Exploited
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616
#VU147166 - Improper Verification of Cryptographic Signature
CVE-2026-67276
CWE-347 Critical
Public exploit available
Exploited
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616
#VU147167 - Missing Authentication for Critical Function
CVE-2026-67277
CWE-306 High
No
Exploited
6.49.21, 7.23.4, 7.24.2 06.09.2026 SB2026090616