{"schema":"threatline.record/2","record":{"id":"CVE-2026-112158","aliases":[],"summary":"MikroTik RouterOS ipt_SAME.ko same_check integer overflow","details":"A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 and 7.23.1 is recommended to address this issue. You should upgrade the affected component.","categories":["Network & edge"],"product":"RouterOS","vendor":"MikroTik","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-112158","source_modified_at":"2026-10-19T17:09:43.696Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"RouterOS","vendor":"MikroTik","versions":[{"version":"6.0","status":"affected"},{"version":"6.1","status":"affected"},{"version":"6.2","status":"affected"},{"version":"6.3","status":"affected"},{"version":"6.4","status":"affected"},{"version":"6.5","status":"affected"},{"version":"6.6","status":"affected"},{"version":"6.7","status":"affected"},{"version":"6.8","status":"affected"},{"version":"6.9","status":"affected"},{"version":"6.10","status":"affected"},{"version":"6.11","status":"affected"},{"version":"6.12","status":"affected"},{"version":"6.13","status":"affected"},{"version":"6.14","status":"affected"},{"version":"6.15","status":"affected"},{"version":"6.16","status":"affected"},{"version":"6.17","status":"affected"},{"version":"6.18","status":"affected"},{"version":"6.19","status":"affected"},{"version":"6.20","status":"affected"},{"version":"6.21","status":"affected"},{"version":"6.22","status":"affected"},{"version":"6.23","status":"affected"},{"version":"6.24","status":"affected"},{"version":"6.25","status":"affected"},{"version":"6.26","status":"affected"},{"version":"6.27","status":"affected"},{"version":"6.28","status":"affected"},{"version":"6.29","status":"affected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":7.1,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00334,"percentile":0.25584,"score_date":"2026-10-23"},"published_at":"2026-10-19T16:00:06.444Z","modified_at":"2026-10-19T17:09:43.696Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-112158","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T17:09:43.696Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-112158","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://vuldb.com/vuln/422285","tags":["vdb-entry","technical-description"]},{"source":"CVE List","url":"https://vuldb.com/vuln/422285/cti","tags":["signature","permissions-required"]},{"source":"CVE List","url":"https://vuldb.com/cve/CVE-2026-112158","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://vuldb.com/submit/956852","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://github.com/MeetFireAgain/cve/mikrotik/routeros-ipt-same-integer-overflow-brick.md","tags":["broken-link"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-19T17:08:58.536559Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T17:09:43.696Z","content_hash":"0b3a05fcb4a6b38cf03dc27c1e90f6b93267e57ee0687f544c60dba6b9279e58"}}