CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected J…
Published: 2025-10-27 · CVSS: 10.0 · CVSS 3.1
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7