Live › vulnerability › CVE-2026-112158
Go to dashboardA flaw in the same_check function of the ipt_SAME.ko kernel module in MikroTik RouterOS can be triggered by a crafted manipulation, causing an integer overflow. The sources do not state the exact effect beyond that, but the flaw is described as remotely triggerable.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MikroTik RouterOS devices within the listed affected version ranges, including routers and firewalls reachable from the network. The sources do not say which configurations expose the ipt_SAME module, so whether devices on a patched or unusual setup are affected is unknown.
No product ranges from the sources yet.
/system resource print and compare it against the affected range up to 6.40.5, 6.44 and 7.20.87.21.5 or 7.23.1, as recommended by the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.
This page as .md · .json · in your agent: get_signal("CVE-2026-112158")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.