Is RouterOS 7.22.3 patched?
Current stable (7.25): 97/100
7.22.3 has 5 open critical-or-high vulnerabilities. Run 7.23.6 or later to clear them. See what 7.23.6 fixes →
Upgrade impact: Minor upgrade. Minor releases are usually backwards-compatible, but can add or change behaviour — test in staging before production.
Summary iPlain-English security status for RouterOS 7.22.3, built from its CVEs, active-exploitation data, end-of-life date and latest release.
RouterOS 7.22.3 is part of the 7.22 release line. 3 actively-exploited vulnerabilities affect it (CISA KEV). The minimum safe version is 7.23.6 — upgrade to it or later to clear the open critical/high issues. The 7.22 line reached end-of-life on 2026-05-26, so it no longer receives security patches. The latest supported RouterOS release is 7.25.
Known issues affecting 7.22.3
Exploited first, then by exploitation probability.
CVE-2026-86060 CRITICAL exploited EPSS 6% → fixed in 7.24.2 CVE-2026-67279 MEDIUM exploited EPSS 2% → fixed in 7.24.2 CVE-2026-67277 HIGH exploited EPSS 2% → fixed in 7.24.2 CVE-2026-67276 HIGH EPSS 9% → fixed in 7.24.2 CVE-2021-3014 MEDIUM EPSS 1% → see advisory CVE-2026-67281 HIGH EPSS 1% → fixed in 7.24.2 CVE-2026-67278 CRITICAL EPSS 0% → fixed in 7.24.3Other RouterOS versions
Check another release line of RouterOS.
Frequently asked
Is RouterOS 7.22.3 patched?
No — 3 actively-exploited vulnerabilities affect RouterOS 7.22.3. Upgrade to at least 7.23.6.
What version should I upgrade RouterOS 7.22.3 to?
Upgrade RouterOS 7.22.3 to at least 7.23.6 to clear its 5 open critical-or-high vulnerabilities.
When does RouterOS 7.22 reach end-of-life?
RouterOS 7.22 reached end-of-life on 2026-05-26 and no longer receives security patches.
What is the latest version of RouterOS?
The latest supported RouterOS release is 7.25.
Is RouterOS 7.22.3 still receiving security updates?
No — RouterOS 7.22.3 is on the 7.22 line, which reached end-of-life on 2026-05-26 and no longer receives security updates. Upgrade to 7.25 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against MikroTik's official advisory before you patch or upgrade.