CVE-2018-14847
MikroTik RouterOS
MikroTik Router OS Directory Traversal Vulnerability
What it is
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other MikroTik entries on the list
- RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-67279 · Sep 25, 2026
- RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CVE-2026-86060 · Sep 10, 2026
- RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-67277 · Sep 10, 2026
- RouterOS MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CVE-2018-7445 · Sep 8, 2022