{"schema":"vulnpedia.research/1","cve":"CVE-2026-67281","references":[{"url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve","tags":["third-party-advisory","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve"}]},{"url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/","tags":["technical-description","Mitigation","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"}]},{"url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/","tags":["exploit","Exploit","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/"}]},{"url":"https://mikrotik.com/supportsec/september-2026-vulnerability/","tags":["vendor-advisory","Vendor Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://mikrotik.com/supportsec/september-2026-vulnerability/"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://mikrotik.com/supportsec/september-2026-vulnerability/"}]},{"url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801","tags":["release-notes","Release Notes"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801"}]},{"url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800","tags":["release-notes","Release Notes"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:07:49.063Z","url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"},{"source":"nvd","sourceId":"CVE-2026-67281","modified":"2026-09-25T14:21:17.737","url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"}]},{"source":"euvd","sourceId":"EUVD-2026-72028","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72028","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-72028","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72028"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/sohel160/Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281-","source":"poc-in-github","sourceId":"CVE-2026-67281","modified":"2026-10-14T14:09:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67281","url":"https://github.com/sohel160/Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281-"},{"source":"poc-in-github","sourceId":"CVE-2026-67281","modified":"2026-10-14T14:09:20Z","url":"https://github.com/sohel160/Webfig-jsproxy-unauthenticated-file-read-CVE-2026-67281-"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}