Integer Overflow Vulnerability in MikroTik RouterOS Products
CVE-2026-112158

7.1HIGH

Key Information:

Vendor

Mikrotik

Status
Routeros
Vendor
CVE Published:
19 October 2026

What is CVE-2026-112158?

A vulnerability has been found in MikroTik RouterOS prior to version 7.21.5, specifically within the same_check function of the ipt_SAME.ko file. This weakness allows for potential integer overflow through remote manipulation, which could lead to unexpected behavior or system compromise. Users are advised to upgrade to the latest versions, 7.21.5 and 7.23.1, to mitigate any risks associated with this vulnerability.

Affected Version(s)

RouterOS 6.0

RouterOS 6.1

RouterOS 6.2

References

https://vuldb.com/vuln/422285
vdb-entrytechnical-description
https://vuldb.com/vuln/422285/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-112158
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

CindyCity (VulDB User)
.