Home › MikroTik RouterOS › 7.24.2

MikroTik RouterOS 7.24.2 – safe to update?

Newer release in this line: MikroTik RouterOS 7.24.5 (2026-10-01). If you're updating now, check that one instead — it may already fix the issues reported here.

What's in this release

CVEs fixed

• CVE-2026-89021 MEDIUM 6.9 (NVD: fixed in this version)
  MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrar…
• CVE-2026-67278 MEDIUM 6.3 (NVD: fixed in this version)
  MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. Because its trust store includes an e=3 root CA, an attacker controlling or redirecting an ou…
• CVE-2026-89020 MEDIUM 5.3 (NVD: fixed in this version)
  MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…

Community reports

• Fine MikroTik hAP be3, 7.24.2 – ports not working? · Reddit · 2026-09-14

  Upgrading to 7.25beta3 seems to fix it

• Mention Starting a container with scheduler · Reddit · 2026-10-11

  Hello! I've been trying to schedule a script running a container on my Mikrotik (HP AX3, RouterOS 7.24.2). Yet it looks like running a container from scheduler is silently skipped? Anyone observed anything like this? When I run the script from terminal like this: /system/script/…

• Mention Okay AI is getting pretty good · Reddit · 2026-09-20

  Always wanted a clean interface for monitoring between OpnSense and MikroTik in a single easy to use pane. I just gave Codex Astra 6 a read only account to my APs and switches. Gave it a local account to my opnsense/gitea/portainer and portainer VM Said do it it all didn't confi…

• Mention A kind reminder I've got from my ISP · Reddit · 2026-09-18

  Looks like they've sent the text to the customers with Mikrotik's OUI on MAC address they see - I don't expose SSH to the 'net.

• Mention Configuration doesnt give IP for PC connected on ether port · Reddit · 2026-09-11

  Hi, I am trying to setup my hAP BE3 as a main router with hAP BE Lite as CAP under CAPsMAN. For the start the goal was to create a home VLAN (10) and later when everything works to extend into more VLANs. The Basic setup is: -ether1 = WAN -ether2 = hAP BE lite (tagged traffic) -…

• Mention Mikrotik auto upgrade · Reddit · 2026-09-08

  I manage some 30 or so SOHO and home routers for a bunch of people. When it started to hit the fan in internet security ( ~2010 I think) I copied this script from somewhere to auto upgrade my router. Is there anything better nowadays? I find conflicting information, and the docu…

• Mention Unable to make hap3 be media to work · Reddit · 2026-09-08

  Hello. I have just bought my first mikrotik device and have hard time trying to configure it. I have default configuration, only admin password changed. Ethernet ports are working fine. Then when I reboot it or disconnect it form power ethernet ports (2-5) stops work. Have zero…

• Mention Does anyone know of this? · Reddit · 2026-09-04

• Mention RouterOS 7.24.2 [stable, testing] released · Reddit · 2026-09-03

  What's new in 7.24.2 (2026-09-03): This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information. *) bgp - fix BGP link-local nexthops unre…

• Mention RouterOS 7.24.2 [stable, testing] released · Reddit · 2026-09-03

  What's new in 7.24.2 (2026-09-03): This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information. *) bgp - fix BGP link-local nexthops unre…

Reports are found automatically and labelled by an AI model plus keyword rules — they can be wrong. Open the post to judge for yourself.

← MikroTik RouterOS 7.24.1 · MikroTik RouterOS 7.24.3 →

Other MikroTik RouterOS versions

• 7.23.8 2026-10-08
• 7.24.5 2026-10-01
• 7.24.4 2026-09-16
• 7.23.7 2026-09-16
• 7.24.3 2026-09-14
• 7.23.6 2026-09-14
• 7.23.5 2026-09-04
• 7.24.2 2026-09-03