CVE-2026-7668-nvd.nist.gov-Received

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the c…

Published:

1 May 2026 at 22:00:00

Alert date:

2 May 2026 at 22:01:04

Source:

nvd.nist.gov

Network Infrastructure

A vulnerability in MikroTik RouterOS 6.49.8 affects the ASN1_STRING_data function in the SCEP Endpoint component. The vulnerability allows remote attackers to trigger an out-of-bounds read by manipulating the transactionID/messageType arguments. A public exploit is available for this vulnerability. The vendor was notified but did not respond to the disclosure.

Technical details

Mitigation steps:

Affected products:

MikroTik RouterOS