{"id":"CVE-2026-84411","published":"2026-10-02T23:16:58Z","modified":"2026-10-06T15:15:48Z","title":"The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body…","vendor":"MikroTik","product":"RouterOS","tier":"core","eol":null,"description":{"text":"The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.","provenance":"source","from":"NVD"},"summary":{"text":"The web management service in MikroTik RouterOS contains an integer underflow in its HTTP request body handling. An unauthenticated attacker with network access to the service can send a single crafted request to execute arbitrary code as root or cause a denial of service, with no user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:16:53Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.00864,"percentile":0.58585,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":5,"pulses":[{"name":"Known_Cve | Oct 11, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6aca554665c47eb24716f8f2","created":"2026-10-10"},{"name":"Known_Cve | Oct 10, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6ac903591ff588ac9423f235","created":"2026-10-09"},{"name":"Known_Cve | Oct 9, 2026 | Part 1/2","url":"https://otx.alienvault.com/pulse/6ac7b19da11e545ded10ae9b","created":"2026-10-08"},{"name":"Known_Cve | Oct 8, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/6ac65e5b607642608f852c9a","created":"2026-10-07"},{"name":"Known_Cve | Oct 7, 2026 | Part 2/2","url":"https://otx.alienvault.com/pulse/6ac50f851d74c73e484f44c6","created":"2026-10-06"}],"provenance":"machine"},"cwes":[{"id":"CWE-191","name":"Integer Underflow (Wrap or Wraparound)"}],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-06.json","tags":[]},{"url":"https://mikrotik.com/download","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-91836","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91836","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2026-10-10","earliestUrl":"https://github.com/maxprog-svg/CVE-2026-84411","repos":[{"name":"Apiratchai/CVE-2026-84411-reproduction","url":"https://github.com/Apiratchai/CVE-2026-84411-reproduction","stars":1,"created":"2026-10-12"},{"name":"maxprog-svg/CVE-2026-84411","url":"https://github.com/maxprog-svg/CVE-2026-84411","stars":0,"created":"2026-10-10"}]},"first":{"date":"2026-10-10","source":"PoC-in-GitHub","url":"https://github.com/maxprog-svg/CVE-2026-84411"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-02","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84411","provenance":"source"},{"date":"2026-10-10","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/maxprog-svg/CVE-2026-84411","provenance":"source"}],"speed":{"daysToPublicExploit":8,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":25.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":11.72,"detail":"percentile 0.5858"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":1.77,"detail":"5 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}