MikroTik security advisory (AV26-992)
Canada's Cyber Centre urges updates for MikroTik RouterOS before 7.24 over CVE-2026-84411.
On October 2, 2026, the Canadian Centre for Cyber Security published advisory AV26-992. It states that MikroTik RouterOS versions prior to 7.24 are affected by CVE-2026-84411, with the issue noted as of September 29, 2026. Administrators are urged to review MikroTik guidance and apply available updates. The alert does not describe active exploitation.
- AV26-992 covers MikroTik RouterOS versions before 7.24.
- The listed vulnerability is CVE-2026-84411, noted as of September 29, 2026.
- Administrators are told to review guidance and apply updates.
- The alert does not report active exploitation.
- CVEs
- CVE-2026-84411
- Vendors
- MikroTik
- Products
- RouterOS
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-84411 | Pre-auth integer underflow RCE in MikroTik RouterOS | 9.3 | <1% | PoC ×2 |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-992 Date: October 2, 2026 As of September 29, 2026, MikroTik is affected by vulnerabilities in the following product: RouterOS Prior to 7. 24 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. MikroTik RouterOS - CVE-2026-84411
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.