CVE-2026-103903

Summary

An incorrect authorization vulnerability in MikroTik RouterOS allows low-privilege WinBox users to impersonate higher-privilege accounts by manipulating the authentication flow. This enables attackers to gain full administrative access without knowing target passwords.

Exploitability

Exploitation requires a valid low-privilege account with WinBox access, making it moderately difficult but possible for attackers who already have some credentials.

Blast radius

The vulnerability could affect many MikroTik devices in enterprise networks where WinBox is enabled, potentially allowing widespread unauthorized administrative access.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable WinBox service or restrict access to it via firewall rules until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.