Out-of-Bounds Read in MikroTik RouterOS Affecting SMB Daemon

CVE-2026-56719

What is CVE-2026-56719?

MikroTik RouterOS prior to version 7.24 is affected by an out-of-bounds read vulnerability in its SMB daemon. An unauthenticated attacker can exploit this flaw by crafting a specific uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. This exploitation leads to memory that is beyond the request buffer being read, occurring before any credential validation. Consequently, sensitive memory contents may be exposed, posing significant security risks for affected systems.

References