CVE-2026-39042

MikroTik RouterOS versions 7.21.x prior to 7.21.4 and 7.22.x prior to 7.22.2 are vulnerable to a denial of service attack due to an issue in the unflatten() function within libumsg.so, allowing remote attackers to disrupt service. Organizations using affected MikroTik routers should prioritize patching to mitigate the risk of service interruptions. This vulnerability poses a significant threat to network availability and should be addressed promptly by network administrators.