medium6.5
CVE-2026-56719
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the…
Impact
MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read occurs in the SessionSetupAndX handler before any credential validation, potentially exposing sensitive memory contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| MikroTik | MikroTik RouterOS | before 7.24 |
Versions were read from the advisory text. No structured product data has been published for this record yet.