Friday, 03 March 2017 / Published in Blog

MikroTik RouterOS

What is RouterOS

RouterOS is the operating system of RouterBOARD

It can also be installed on a PC and will turn it into a router with all the necessary features – routing, firewall, bandwidth management, wireless access point, backhaul link, hotspot gateway, VPN server and more.
You can compare the different license Level features on this page in our manual.

Installing RouterOS on an x86 machine is very simple

PC: Download the ISO image, burn it to CD and boot from it. Your new router will run for 24 hours without a license (turn it off to stop the timer). During this time you can try all the features of RouterOS.
Other x86: Netinstall will write RouterOS to any secondary drive you have attached to your Windows PC. Move the drive to your Router PC and boot it.Both installation methods, plus upgrade files and more – on MikroTik download page.

ASK US FOR 30 DAYS TRIAL MIKROTIK HOST

Virtual environments now have special treatment: CHR

CHR, short for Cloud Hosted Router, is a new approach specifically made for Virtual Machines both locally and in the cloud. Optimised drivers, a new and more affordable licensing scheme, transferable licenses and more.
CHR is a special installation image, which is available for free on our download page, or directly in the Amazon AWS marketplace. Read mode in the PDF brochure.

Learning more about our software

RouterOS has extensive documentation.
MikroTik Certification Courses; MTCNA, MTCRE, MTCWE, MTCTCE, MTCINE, MTCUME
Workshops and Events
WirelessNetware also provides any technical support related to MikroTik RouterOS.

Purchasing a license for RouterOS

To use RouterOS after the free trial, a license key is required. You can obtain license keys in the MikroTik Account server. If you don’t have an account yet, click on “New Account” there in the top-right corner of this page.
When purchasing the license, a SoftID number will be asked – this can be copied from the router’s License menu.
To view license key level differences, see the comparison table.

Important notes about MikroTik RouterOS

Make sure to use correct RouterOS package to update your router.
Before doing any RouterOS update read change-log.
RouterOS “Bug-fix” version is usually the best OS.
If you want to use RouterOS “current” version it is recommended to read change-log for RouterOS “Release candidate” and make sure there is no bug for the features already used in your router.
RouterOS “Release candidate” is usually used when MikroTik developer are working on a new feature to add to RouterOS or else to fix the possible bug.
RouterOS “Current” is not fully tested.
NETINSTALL is used when you forger your Router password, install new RouterOS, lost RouterOS, kernel fail issue.

Load-balance using PCC in MikroTik RouterOS v 6.xx

Introduction PCC “Per Connection Classifi...
Audience – a router for those who value both beauty and functionality

Audience is a tri-band (2.4 GHz & high + lo...
DO NOT let the cables limit you, More Throughput over Power!

PWR-LINE PRO PWR-LINE PRO (PL7510Gi) is a smart...
The First MikroTik product with 10G RJ45 Ethernet ports, CRS312-4C+8XG-RM

CRS312-4C+8XG-RM Switch of the future: the firs...
Netflix has identified vulnerabilities in RouterOS.

Netflix has identified several TCP networking v...

CVE-2026-52346
An out-of-bounds read vulnerability has been identified in MikroTik RouterOS, in the code that inspects TLS traffic for firewall rules that match TLS connections. A specially crafted packet could allow an attacker to crash the router or disclose a limited amount of memory contents. This issue was reported by Rasmus Moorats and is tracked as […]
September 2026 vulnerability
MikroTik has found a security vulnerability in RouterOS and releases containing a fix have been published in all channels. This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information. Your device should already give […]
CVE-2025-10948
A buffer overflow vulnerability has been discovered in MikroTik RouterOS 7, affecting the parse_json_element function within the libjson.so component. The vulnerability is triggered through the /rest/ip/address/print endpoint and can be exploited remotely. The exploit for this issue has been publicly disclosed and may be actively used. Upgrading to RouterOS version 7.20.1 or 7.21beta2 mitigates this […]
CVE-2025-6563
A cross-site scripting (XSS) vulnerability has been discovered in the hotspot functionality of MikroTik RouterOS, affecting versions below 7.19.2. An attacker can inject the javascript protocol via the dst parameter in a crafted URL. When a victim browses to this malicious URL and logs in through the hotspot page, the injected XSS payload executes in […]
CVE-2023-47310
A misconfiguration in the default settings of MikroTik RouterOS 7 allows incoming IPv6 UDP traceroute packets, which could permit unauthorized network reconnaissance from external sources. Users are advised to upgrade to RouterOS 6.49.13, 7.14, or any later version to address this vulnerability. MikroTik always recommends keeping RouterOS devices up to date and using a strong […]
CVE-2025-6443
An improper access control vulnerability has been identified in MikroTik RouterOS, related to the handling of VXLAN source IP addresses. This flaw allows remote attackers to bypass access restrictions on affected installations without requiring authentication. The specific issue exists within the processing of remote IP addresses during VXLAN traffic handling. The router fails to validate […]
CVE-2024-54952
A memory corruption vulnerability has been discovered in the SMB service of MikroTik RouterOS. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets to the SMB service, triggering a null pointer dereference. This results in a remote denial of service (DoS) condition, rendering the SMB service unavailable. Users are advised to upgrade […]
CVE-2024-54772
Issue Summary A vulnerability has been identified in the WinBox service, where a discrepancy in response size between connection attempts with valid and invalid usernames allows attackers to confirm if user accounts exists via brute forcing the login process. In other words, when attacker tries to log into the device, by examining the response, the […]
CVE-2024-27686
The SMB service in RouterOS 6 could be affected by a specially crafted SMB session setup packet. In the reported scenario, this could interrupt the active SMB session, which may also interrupt an ongoing file transfer that depends on that session. This issue is fixed in RouterOS 6.49.14. RouterOS version 7 is not affected. MikroTik […]
CVE-2023-41570
MikroTik RouterOS versions 7.1 through 7.11 contained an access control issue in the REST API. The issue applied to installations where the REST API was enabled and reachable, and could allow requests to be handled with incorrect access control. This issue is fixed in RouterOS 7.12 and newer releases. MikroTik always recommends keeping RouterOS devices […]

MikroTik RouterOS

What is RouterOS

What you can read next