CVE Watch—

CVE-2018-14847

MikroTik Router OS Directory Traversal Vulnerability

CVSS

—

No CVSS

EPSS

96.0%

p100

KEV

YES

Dec 1, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

96.0%EPSS · 30 days96.1%

2026-09-162026-10-14

KEV catalog record

Product

MikroTik / RouterOS

Vulnerability

MikroTik Router OS Directory Traversal Vulnerability

Added to KEV

Dec 1, 2021

Remediate by

Jun 1, 2022

Known ransomware use

Summary description

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-14847

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-860609.8 CRI

93.6%

KEV—78MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability34d CVE-2026-672796.5 MED

62.9%

KEV—69Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability19d CVE-2026-672778.2 HIG

74.7%

KEV—72MikroTik RouterOS Missing Authentication for Critical Function Vulnerability34d CVE-2018-7445—

99.1%

KEV—80MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability—