CVE-2025-42611

CWE-295Published: May 5, 2026· Updated: May 7, 2026

6.5

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.7th

Official Description

RouterOS provides various services that rely on correct

verification of client and server certificates to secure confidentiality and

integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x (802.1X),

among others.

The vulnerability lies in shared certificate validation

logic which uses the system certificate store that is shared and equally

trusted by all system services. This causes confusion of scope, allowing any

certificate authority present in the system-wide trust store to be trusted in

any context (with some exceptions), allowing partial or full authentication

bypass in CAPsMAN, OpenVPN, Dot1X and potentially others.

NVD Source

Technical Analysis

CVE-2025-42611 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.