CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

CISA has issued a warning about a critical vulnerability in MikroTik RouterOS that can be exploited without authentication. The flaw allows attackers to achieve remote code execution (RCE) or trigger a denial-of-service (DoS) condition. MikroTik RouterOS is widely deployed in network infrastructure environments worldwide. The vulnerability is considered critical due to its pre-authentication nature, meaning no credentials are required to exploit it. CISA's warning suggests the flaw may be actively exploited or poses a significant risk to critical infrastructure. Organizations using MikroTik devices are urged to apply patches or mitigations promptly.