Is CVE-2026-112158 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112158?

CVE-2026-112158 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-112158

Description

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.