MikroTik RouterOS
Network · products/routeros.yaml · RSS
Latest 7.25 Oct 1, 2026
Latest per track
| Track | Latest | Released |
|---|---|---|
| RouterOS 7 · long-term | 7.23.8 | Oct 9, 2026 |
| RouterOS 7 · stable | 7.25 | Oct 1, 2026 |
| RouterOS 7 · testing | 7.25 | Oct 1, 2026 |
| RouterOS 6 · long-term | 6.49.23 | Oct 9, 2026 |
| RouterOS 6 · stable | 6.49.23 | Oct 9, 2026 |
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 7.24 | 7.24.5 | Aug 17, 2026 | — · maintained |
| 7.23 LTS | 7.23.8 | May 26, 2026 | — · maintained |
| 7.22 | 7.22.3 | Mar 10, 2026 | May 26, 2026 · ended |
| 7.21 LTS | 7.21.5 | Jan 12, 2026 | May 26, 2026 · ended |
| 7.20 LTS | 7.20.8 | Sep 30, 2025 | Jan 12, 2026 · ended |
| 7.19 | 7.19.6 | May 22, 2025 | Sep 30, 2025 · ended |
| 7.18 | 7.18.2 | Feb 24, 2025 | May 22, 2025 · ended |
| 7.17 | 7.17.2 | Jan 16, 2025 | Feb 24, 2025 · ended |
| 7.16 | 7.16.2 | Sep 24, 2024 | Jan 16, 2025 · ended |
| 7.15 | 7.15.3 | May 30, 2024 | Sep 24, 2024 · ended |
| 7.14 | 7.14.3 | Mar 25, 2024 | May 30, 2024 · ended |
| 7.13 | 7.13.5 | Dec 14, 2023 | Mar 25, 2024 · ended |
| 7.12 | 7.12.2 | Nov 9, 2023 | Dec 14, 2023 · ended |
| 7.11 | 7.11.3 | Aug 15, 2023 | Nov 9, 2023 · ended |
| 7.10 | 7.10.2 | Jun 15, 2023 | Aug 15, 2023 · ended |
| 7.9 | 7.9.2 | May 2, 2023 | Jun 15, 2023 · ended |
| 7.8 | 7.8 | Feb 24, 2023 | May 2, 2023 · ended |
| 7.7 | 7.7 | Jan 12, 2023 | Feb 24, 2023 · ended |
| 7.6 | 7.6 | Oct 17, 2022 | Jan 12, 2023 · ended |
| 7.5 | 7.5 | Aug 30, 2022 | Oct 17, 2022 · ended |
| 7.4 | 7.4.1 | Jul 19, 2022 | Aug 30, 2022 · ended |
| 7.3 | 7.3.1 | Jun 6, 2022 | Jul 19, 2022 · ended |
| 7.2 | 7.2.3 | Mar 31, 2022 | Jun 6, 2022 · ended |
| 7.1 | 7.1.5 | Dec 1, 2021 | Mar 31, 2022 · ended |
| 6.49 LTS | 6.49.23 | Oct 6, 2021 | — · maintained |
| 6.48 | 6.48.7 | Dec 22, 2020 | — · ended |
| 6.47 | 6.47.10 | Jun 2, 2020 | — · ended |
| 6.46 LTS | 6.46.8 | Dec 2, 2019 | — · ended |
| 6.45 LTS | 6.45.9 | Jun 21, 2019 | — · ended |
| 6.44 LTS | 6.44.6 | Feb 25, 2019 | — · ended |
| 6.43 LTS | 6.43.16 | Sep 6, 2018 | — · ended |
| 6.42 LTS | 6.42.12 | Apr 13, 2018 | — · ended |
| 6.41 | 6.41.4 | Dec 22, 2017 | — · ended |
| 6.40 LTS | 6.40.9 | Jul 21, 2017 | — · ended |
| 6.39 LTS | 6.39.3 | Apr 27, 2017 | — · ended |
| 6.38 LTS | 6.38.7 | Dec 30, 2016 | — · ended |
| 6.37 LTS | 6.37.5 | Sep 23, 2016 | — · ended |
| 6.36 | 6.36.3 | Jul 20, 2016 | — · ended |
| 6.35 | 6.35.4 | Apr 14, 2016 | — · ended |
| 6.34 LTS | 6.34.6 | Jan 29, 2016 | — · ended |
| 6.33 | 6.33.6 | Nov 6, 2015 | — · ended |
| 6.32 LTS | 6.32.4 | Sep 7, 2015 | — · ended |
| 6.30 LTS | 6.30.4 | Jul 8, 2015 | — · ended |
| 6.29 | 6.29.1 | May 27, 2015 | — · ended |
| 6.28 | 6.28 | Apr 15, 2015 | — · ended |
| 6.27 | 6.27 | Feb 11, 2015 | — · ended |
| 6.26 | 6.26 | Feb 3, 2015 | — · ended |
| 6.25 | 6.25 | Jan 19, 2015 | — · ended |
| 6.24 | 6.24 | Dec 23, 2014 | — · ended |
| 6.23 | 6.23 | Dec 4, 2014 | — · ended |
| 6.22 | 6.22 | Nov 11, 2014 | — · ended |
| 6.20 | 6.21.1 | Oct 1, 2014 | — · ended |
| 6.19 | 6.19 | Aug 26, 2014 | — · ended |
| 6.18 | 6.18 | Aug 1, 2014 | — · ended |
| 6.17 | 6.17 | Jul 18, 2014 | — · ended |
| 6.16 | 6.16 | Jul 17, 2014 | — · ended |
| 6.15 | 6.15 | Jun 12, 2014 | — · ended |
| 6.14 | 6.14 | Jun 6, 2014 | — · ended |
| 6.13 | 6.13 | May 15, 2014 | — · ended |
| 6.12 | 6.12 | Apr 14, 2014 | — · ended |
| 6.11 | 6.11 | Mar 20, 2014 | — · ended |
| 6.10 | 6.10 | Feb 12, 2014 | — · ended |
| 6.9 | 6.9 | Jan 31, 2014 | — · ended |
| 6.7 | 6.7 | Nov 29, 2013 | — · ended |
| 6.6 | 6.6 | Nov 7, 2013 | — · ended |
| 6.5 | 6.5 | Oct 16, 2013 | — · ended |
| 6.4 | 6.4 | Sep 12, 2013 | — · ended |
| 5.26 | 5.26 | Sep 4, 2013 | — · ended |
| 6.3 | 6.3 | Sep 3, 2013 | — · ended |
| 6.2 | 6.2 | Aug 2, 2013 | — · ended |
| 6.1 | 6.1 | Jun 12, 2013 | — · ended |
| 6.0 | 6.0 | May 17, 2013 | — · ended |
| 5.25 | 5.25 | Apr 25, 2013 | — · ended |
| 5.24 | 5.24 | Feb 19, 2013 | — · ended |
| 5.23 | 5.23 | Jan 29, 2013 | — · ended |
| 5.22 | 5.22 | Nov 23, 2012 | — · ended |
| 5.21 | 5.21 | Oct 12, 2012 | — · ended |
| 5.20 | 5.20 | Aug 15, 2012 | — · ended |
| 5.19 | 5.19 | Jul 16, 2012 | — · ended |
| 5.18 | 5.18 | Jun 21, 2012 | — · ended |
| 5.17 | 5.17 | May 28, 2012 | — · ended |
| 5.16 | 5.16 | May 9, 2012 | — · ended |
| 5.14 | 5.14 | Feb 22, 2012 | — · ended |
| 5.13 | 5.13 | Feb 14, 2012 | — · ended |
| 5.12 | 5.12 | Jan 19, 2012 | — · ended |
| 5.11 | 5.11 | Dec 12, 2011 | — · ended |
| 5.9 | 5.9 | Nov 29, 2011 | — · ended |
| 5.8 | 5.8 | Nov 1, 2011 | — · ended |
| 5.7 | 5.7 | Sep 14, 2011 | — · ended |
| 4.17 | 4.17 | Mar 2, 2011 | — · ended |
| 4.10 | 4.10 | May 26, 2010 | — · ended |
| 3.30 | 3.30 | Sep 11, 2009 | — · ended |
Recent releases
securitysystem - improve stability (includes CVE-2026-84411)
securitycrypto - improve stability (CVE-2026-67278)
securityuser - improve failed login delay logic (CVE-2026-16347)
securityFixes CVE-2026-86060: RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to…
securityFixes CVE-2026-67277: RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "ra…
securityFixes CVE-2026-67279: RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send…
Security advisories
8.2 CVE-2026-67277 RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "ra…
9.1 CVE-2026-67278 MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store include…
6.5 CVE-2026-67279 RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send…
7.5 CVE-2026-67281 RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization.…
9.8 CVE-2026-86060 RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to…
8.1 CVE-2026-67276 RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because sig…
7.2 CVE-2025-6443 Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote attackers to bypass access restrictions on affected installations of Mikrotik RouterOS. Aut…
7.5 CVE-2024-54952 MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a nul…
5.4 CVE-2024-54772 An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.…
7.5 CVE-2023-32154 Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik…
5.3 CVE-2023-41570 MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.
7.5 CVE-2023-30800 The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTT…
9.1 CVE-2023-30799 MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-a…
7.5 CVE-2020-20021 An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon.
7.5 CVE-2023-24094 An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets.
6.4 CVE-2022-45315 Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted p…
8.8 CVE-2022-45313 Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.
9.8 CVE-2017-20149 The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by s…
6.5 CVE-2022-36522 Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of…
9.8 CVE-2022-34960 The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to…
Sources
- rss https://mikrotik.com/current.rss
- html https://mikrotik.com/download/changelogs
- pointer https://upgrade.mikrotik.com/routeros/NEWESTa7.stable
- pointer https://upgrade.mikrotik.com/routeros/NEWESTa7.long-term
- pointer https://upgrade.mikrotik.com/routeros/NEWESTa7.testing
- pointer https://upgrade.mikrotik.com/routeros/NEWEST6.long-term
- pointer https://upgrade.mikrotik.com/routeros/NEWEST6.stable
- endoflife https://endoflife.date/routeros
- nvd https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Ao%3Amikrotik%3Arouteros