CVE-2026-112158

CVSS 7.1 (high) · published 2026-10-19

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.

Weakness: CWE-189, CWE-190

Source: NVD CVE-2026-112158

References

• https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md
• https://vuldb.com/cve/CVE-2026-112158
• https://vuldb.com/submit/956852
• https://vuldb.com/vuln/422285
• https://vuldb.com/vuln/422285/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.