---
id: CVE-2026-112158
title: MikroTik RouterOS ipt_SAME.ko same_check integer overflow
summary: >-
  A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8.
  Impacted is the function same_check of the file ipt_SAME.ko. Executing a
  manipulation can lead to integer overflow. The attack may be launched
  remotely. Upgrad…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:X/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-190
  - CWE-189
vendor: MikroTik
product: RouterOS
affected:
  - RouterOS 6.0
  - RouterOS 6.1
  - RouterOS 6.2
  - RouterOS 6.3
  - RouterOS 6.4
  - RouterOS 6.5
  - RouterOS 6.6
  - RouterOS 6.7
  - RouterOS 6.8
  - RouterOS 6.9
  - RouterOS 6.10
  - RouterOS 6.11
  - RouterOS 6.12
  - RouterOS 6.13
  - RouterOS 6.14
  - RouterOS 6.15
  - RouterOS 6.16
  - RouterOS 6.17
  - RouterOS 6.18
  - RouterOS 6.19
  - RouterOS 6.20
  - RouterOS 6.21
  - RouterOS 6.22
  - RouterOS 6.23
  - RouterOS 6.24
  - RouterOS 6.25
  - RouterOS 6.26
  - RouterOS 6.27
  - RouterOS 6.28
  - RouterOS 6.29
  - RouterOS 6.30
  - RouterOS 6.31
  - RouterOS 6.32
  - RouterOS 6.33
  - RouterOS 6.34
  - RouterOS 6.35
  - RouterOS 6.36
  - RouterOS 6.37
  - RouterOS 6.38
  - RouterOS 6.39
  - RouterOS 6.40
  - RouterOS 6.40.0
  - RouterOS 6.40.1
  - RouterOS 6.40.2
  - RouterOS 6.40.3
  - RouterOS 6.40.4
  - RouterOS 6.40.5
  - RouterOS 6.41
  - RouterOS 6.42
  - RouterOS 6.43
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-19T17:08:58.536559Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T17:09:43.696Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112158'
references:
  - url: 'https://vuldb.com/vuln/422285'
    label: VDB-422285 | MikroTik RouterOS ipt_SAME.ko same_check integer overflow
  - url: 'https://vuldb.com/vuln/422285/cti'
    label: 'VDB-422285 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-112158'
    label: CVE-2026-112158 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/956852'
    label: >-
      Submit #956852 | MikroTik RouterOS <= 7.20.x long-term channel (tested:
      6.40.5, 6.44, 7.20.8); v6 line affected Integer Overflow
  - url: >-
      https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md
tags:
  - cve.org
ingestedAt: '2026-10-19T16:32:30.073Z'
---

## Overview

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.

## Affected

- `RouterOS 6.0`
- `RouterOS 6.1`
- `RouterOS 6.2`
- `RouterOS 6.3`
- `RouterOS 6.4`
- `RouterOS 6.5`
- `RouterOS 6.6`
- `RouterOS 6.7`
- `RouterOS 6.8`
- `RouterOS 6.9`
- `RouterOS 6.10`
- `RouterOS 6.11`
- `RouterOS 6.12`
- `RouterOS 6.13`
- `RouterOS 6.14`
- `RouterOS 6.15`
- `RouterOS 6.16`
- `RouterOS 6.17`
- `RouterOS 6.18`
- `RouterOS 6.19`
- `RouterOS 6.20`
- `RouterOS 6.21`
- `RouterOS 6.22`
- `RouterOS 6.23`
- `RouterOS 6.24`
- `RouterOS 6.25`
- `RouterOS 6.26`
- `RouterOS 6.27`
- `RouterOS 6.28`
- `RouterOS 6.29`
- `RouterOS 6.30`
- `RouterOS 6.31`
- `RouterOS 6.32`
- `RouterOS 6.33`
- `RouterOS 6.34`
- `RouterOS 6.35`
- `RouterOS 6.36`
- `RouterOS 6.37`
- `RouterOS 6.38`
- `RouterOS 6.39`
- `RouterOS 6.40`
- `RouterOS 6.40.0`
- `RouterOS 6.40.1`
- `RouterOS 6.40.2`
- `RouterOS 6.40.3`
- `RouterOS 6.40.4`
- `RouterOS 6.40.5`
- `RouterOS 6.41`
- `RouterOS 6.42`
- `RouterOS 6.43`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.