CVE-2026-112158

MEDIUM 6.5

MikroTik RouterOS ipt_SAME.ko same_check integer overflow

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.

CWE	CWE-190 CWE-189
Vendor	mikrotik
Product	routeros
Published	Oct 19, 2026
Last Updated	Oct 19, 2026

Stay Ahead of the Next One

Get instant alerts for mikrotik routeros

Be the first to know when new medium vulnerabilities affecting mikrotik routeros are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

MikroTik / RouterOS

6.0 6.1 6.2 6.3 6.4 6.5 6.6 6.7 6.8 6.9 6.10 6.11 6.12 6.13 6.14 6.15 6.16 6.17 6.18 6.19 6.20 6.21 6.22 6.23 6.24 6.25 6.26 6.27 6.28 6.29 6.30 6.31 6.32 6.33 6.34 6.35 6.36 6.37 6.38 6.39 6.40 6.40.0 6.40.1 6.40.2 6.40.3 6.40.4 6.40.5 6.41 6.42 6.43 6.44 7.20.0 7.20.1 7.20.2 7.20.3 7.20.4 7.20.5 7.20.6 7.20.7 7.20.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/422285 vuldb.com: https://vuldb.com/vuln/422285/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112158 vuldb.com: https://vuldb.com/submit/956852 github.com: https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md

Credits

🔍 CindyCity (VulDB User)