CVE-2026-67278 - TLS server impersonation possible in Mikrotik RouterOS
Brief
CVE ID : CVE-2026-67278
Published : Sept. 5, 2026, 8:17 p. m.
- 28 minutes ago
Description : MikroTik RouterOS accepts malformed RSA/PKCS#1 v1. 5 signatures during X. 509 validation. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an outbound RouterOS TLS connection can use the root’s public certificate - without its private key - to forge a trusted intermediate and issue certificates for arbitrary hostnames, enabling TLS server impersonation.
This issue was fixed in versions: 6.
- 21 (Lont-term), 7.
- 4 (Lont-term) and 7.
- 2 (Stable)
Severity: 6.3
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...