RouterOS — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in RouterOS, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-42611	Improper certificate validation in multiple RouterOS services CWE-295	6.5	Medium	2026-05-05
CVE-2026-7668	MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds CWE-125	7.3	High	2026-05-02
CVE-2025-10948	MikroTik RouterOS libjson.so print parse_json_element buffer overflow CWE-120	8.8	High	2025-09-25
CVE-2025-6563	Cross-site scripting via dst parameter in RouterOS WiFi hotspot CWE-20	6.1^AI	Medium^AI	2025-07-03
CVE-2025-6443	Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability CWE-284	9.8^AI	Critical^AI	2025-06-25
CVE-2023-32154	Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787	8.8	-	2024-05-03
CVE-2023-30800	MikroTik RouterOS Web Interface Heap Corruption CWE-787	7.5	High	2023-09-07
CVE-2023-30799	MikroTik RouterOS Administrator Privilege Escalation CWE-269	9.1	Critical	2023-07-19
CVE-2022-45315	MikroTik RouterOS 缓冲区错误漏洞 CWE-125	6.4	Medium	2022-12-05
CVE-2019-3943	MikroTik RouterOS 路径遍历漏洞 CWE-23	8.1	-	2019-04-10

All 10 known CVE vulnerabilities affecting RouterOS with full Chinese analysis, references, and POCs where available.