CVE-2026-22110 Details

A vulnerability exists in MikroTik RouterOS due to the web server's failure to authenticate POST and PUT requests. This allows an unauthenticated attacker to reboot the charger and, by brute-forcing the config ID, potentially change the service password and modify other settings. This issue is part of a broader set of vulnerabilities actively exploited in the wild, known as 'MikroTrick', which involve SSH authentication bypass and privilege escalation.

Users are advised to upgrade RouterOS to version 6.49.21, 7.23.4, 7.24.2, or 7.25 beta 3, all of which include the necessary fix. After upgrading, it is recommended to restrict SSH access to trusted networks or use a VPN, such as WireGuard, until the device can be updated. Following the upgrade, check the RouterOS log for any signs of compromise and review the router's configuration for any unauthorized changes.