Home › MikroTik RouterOS › 7.23.4
MikroTik RouterOS 7.23.4 – safe to update?
0 problem reports and 0 positive reports found on Reddit (plus 3 other mentions). Out for 44 days and we haven't found any problem reports. Quiet isn't proof — but most bad releases get noticed within a week.
Newer release in this line: MikroTik RouterOS 7.23.8 (2026-10-08). If you're updating now, check that one instead — it may already fix the issues reported here.
Requirements and changes
Lines from the official notes worth checking before you update:
- lte - removed extra restart after firmware upgrade for EC200A-EU modem
Did you install 7.23.4?
Thanks — your vote is counted.
What's in this release
Long-term release with 25 changelog entries (17 are fixes or stability changes).
Source: MikroTik changelog (upgrade.mikrotik.com, long-term channel)
CVEs fixed
- CVE-2026-67278 MEDIUM 6.3 (NVD: fixed in this version)
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an ou… - CVE-2026-89020 MEDIUM 5.3 (NVD: fixed in this version)
MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…
Community reports
- Mention
Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain | Nick Pratley · Reddit · 2026-09-08
- Mention
Write up on the Mikrotik SSH unauth RCE · Reddit · 2026-09-04
Because sharing is caring, (even if the article is cringey AI slop copy) here is a technical write up by someone who reverse engineered the Mikrotik SSH RCE (or had their agent do it 🤷). https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-…
- Mention
RouterOS 7.23.4 [long-term] released · Reddit · 2026-09-03
What's new in 7.23.4 (2026-09-03): This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information. *) bgp - fix BGP link-local nexthops unre…
Reports are found automatically and labelled by an AI model plus keyword rules — they can be wrong. Open the post to judge for yourself.
← MikroTik RouterOS 7.23.3 · MikroTik RouterOS 7.23.5 →
Other MikroTik RouterOS versions
- 7.23.8 2026-10-08
- 7.24.5 2026-10-01
- 7.24.4 2026-09-16
- 7.23.7 2026-09-16
- 7.24.3 2026-09-14
- 7.23.6 2026-09-14
- 7.23.5 2026-09-04
- 7.24.2 2026-09-03
The weekly "safe to update?" email
One short email a week: what shipped, what broke, and what's safe to install. No spam.
Thanks — you're on the list.
We store only your email address and the date you signed up, to send this newsletter. We never sell or share it. Every email will have a one-click unsubscribe; you can also ask us to delete your address at any time. Privacy details.