Heap Memory Corruption in MikroTik RouterOS Affected by SMB Daemon

CVE-2026-89028

What is CVE-2026-89028?

MikroTik RouterOS versions before 7.24 exhibit a vulnerability within the userspace SMB daemon that allows remote attackers to exploit a heap memory corruption issue. By sending a malicious SMB1 request containing a crafted uniPwdLen value, an attacker may trigger an integer underflow. This exploit uses the flawed value as the copy length in a memory operation, allowing adjacent heap memory to be corrupted. This vulnerability poses a serious risk, as it could enable unauthorized access or manipulation within affected network environments.

References