Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking

Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking.MikroTik routers are network devices that use the RouterOS operating system to provide advanced routing, firewall, wireless, VPN, bandwidth management, and network security features for homes, businesses, and internet service providers. Successful exploitation of the most severe of these vulnerabilities could allow an attacker to take full control of a device without authentication.

There are reports of these vulnerabilities being exploited in the wild.

Multiple vulnerabilities have been discovered in MikroTik routers, the most severe of which could allow for admin hijacking. Details of these vulnerabilities are below:

Tactic:Privilege Escalation(TA0004):

Technique:Abuse Elevation Control Mechanism: Bypass User Account Control(T1548.002):

Tactic:Privilege Escalation(TA0004):

Technique:Exploitation for Privilege Escalation(T1068):

Successful exploitation of the most severe of these vulnerabilities could result in the attacker taking full control of a device without authentication.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®