Is RouterOS 7.8 patched?
Current stable (7.25): 97/100
7.8 has 4 open critical-or-high vulnerabilities. Run 7.23.6 or later to clear them. See what 7.23.6 fixes →
Upgrade impact: Minor upgrade. Minor releases are usually backwards-compatible, but can add or change behaviour — test in staging before production.
Summary iPlain-English security status for RouterOS 7.8, built from its CVEs, active-exploitation data, end-of-life date and latest release.
RouterOS 7.8 is part of the 7.8 release line. 3 actively-exploited vulnerabilities affect it (CISA KEV). The minimum safe version is 7.23.6 — upgrade to it or later to clear the open critical/high issues. The 7.8 line reached end-of-life on 2023-05-02, so it no longer receives security patches. The latest supported RouterOS release is 7.25.
Known issues affecting 7.8
Exploited first, then by exploitation probability.
CVE-2026-86060 CRITICAL exploited EPSS 6% → fixed in 7.24.2 CVE-2026-67279 MEDIUM exploited EPSS 2% → fixed in 7.24.2 CVE-2026-67277 HIGH exploited EPSS 2% → fixed in 7.24.2 CVE-2024-54772 MEDIUM EPSS 1% → fixed in 7.18 CVE-2021-3014 MEDIUM EPSS 1% → see advisory CVE-2025-6443 HIGH EPSS 1% → fixed in 7.20 CVE-2023-41570 MEDIUM EPSS 0% → fixed in 7.12 CVE-2026-67278 CRITICAL EPSS 0% → fixed in 7.24.3Other RouterOS versions
Check another release line of RouterOS.
Frequently asked
Is RouterOS 7.8 patched?
No — 3 actively-exploited vulnerabilities affect RouterOS 7.8. Upgrade to at least 7.23.6.
What version should I upgrade RouterOS 7.8 to?
Upgrade RouterOS 7.8 to at least 7.23.6 to clear its 4 open critical-or-high vulnerabilities.
When does RouterOS 7.8 reach end-of-life?
RouterOS 7.8 reached end-of-life on 2023-05-02 and no longer receives security patches.
What is the latest version of RouterOS?
The latest supported RouterOS release is 7.25.
Is RouterOS 7.8 still receiving security updates?
No — RouterOS 7.8 is on the 7.8 line, which reached end-of-life on 2023-05-02 and no longer receives security updates. Upgrade to 7.25 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against MikroTik's official advisory before you patch or upgrade.