A buffer overflow vulnerability has been identified in the “fetch” tool of RouterOS ( /tool fetch ), when it is given a very long tftp:// address. A logged-in user can use this to crash the fetch process. The issue has been assigned CVE-2026-89020.
Need help?
Contact usA buffer overflow vulnerability has been identified in the “fetch” tool of RouterOS ( /tool fetch ), when it is given a very long tftp:// address. A logged-in user can use this to crash the fetch process. The issue has been assigned CVE-2026-89020.