https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:47:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-14157 bdu:2026-14157 https://cve.radiocsirt.org/vuln/bdu:2026-14157 https://cve.radiocsirt.org/vuln/euvd-2026-366679 EUVD-2026-366679 https://cve.radiocsirt.org/vuln/euvd-2026-366679 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67277 <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-67277 https://cve.radiocsirt.org/vuln/ghsa-6q2x-6fhj-r3w8 <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> <p>RouterOS accepts a &#34;related&#34; btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With &#34;random-data=false&#34;, the sender transmits an uninitialized tail from a kernel packet buffer. A separate unchecked, inverted packet-size interval causes unsigned integer underflow, anomalously large fragmented output, and can restart the RouterOS kernel.</p> <p>This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)</p> https://cve.radiocsirt.org/vuln/ghsa-6q2x-6fhj-r3w8 https://cve.radiocsirt.org/vuln/ncsc-2026-0345 NCSC-2026-0345 https://cve.radiocsirt.org/vuln/ncsc-2026-0345 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3193 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MikroTik RouterOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Denial of Service Zustand herbeizuführen und um die Kontrolle über betroffene Geräte zu übernehmen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MikroTik RouterOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Denial of Service Zustand herbeizuführen und um die Kontrolle über betroffene Geräte zu übernehmen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3193