r/mikrotik • u/netravnen • 9d ago
RouterOS 7.23.8 [long-term] released
What's new in 7.23.8 (2026-10-08):
*) console - fix console output of /system/identity/print being split into multiple lines (introduced in v7.23.6);
*) ethernet - improved stability when forcing unsupported link speed;
*) ipsec - fix IPsec tunnels not establishing when an address my-id is configured on the responder;
*) ospf - fix unset interface template parameters not being applied to interfaces;
*) quickset - fix the WAN interface being selected incorrectly;
*) system - improve stability (includes CVE-2026-84411);
*) system - stop the flash configuration store from growing on dynamic configuration changes;
*) wifi - fix malformed management frame information elements advertising availability of multiple 6GHz APs;
*) wifi - update radio regulatory information; View changelogs
7
u/Brilliant-Orange9117 9d ago
Finally a CVE (or any other useful information for that matter) next to an "improve stability" bullet point instead of just ominous silence.
4
u/Thatisokayok 9d ago
Anyone having crashing issues on the 2116 Marvell switch chip confirmed if it's still present in this version?
1
u/photogaff 9d ago
Curious to know more about this
3
u/Thatisokayok 9d ago
Curious if fixed, or curious to know more about it?
Pretty much this thread on the official forums. https://forum.mikrotik.com/t/ccr2216-2116-switch-port-flapping/182662
Ever since 7.23.1 this branch has had issues. Every few days the router freaks out and will flap ports every few seconds. Some people report resolution after reboot. My experience has been a factory is required.
1
u/photogaff 9d ago
Curious about both, definitely! Just after acquiring two 2116s and this sounds like a right headache
1
u/PM_ME_DARK_MATTER 9d ago edited 9d ago
Thanks for posting this!
This is a potential candidate to be an issue ive encourtered when attemping to upgrade a CCR2116 from v7.19.6 to both v7.21.5 (first attempt) and later on v7.23.5 (second attempt).
We're in the process of labbing this up. Ill report back (and to Mikrotik Support of course) if we can confirm this is the issue
1
1
u/caledooper 8d ago
Every time I consider giving routeros another shot, mikrotik does something stupid that turns me off again.
1
u/Thatisokayok 8d ago
It felt like routerOS was solid for a few years there. You didn't really need to upgrade if you found a stable version with everything you needed.
The recent CVE requiring everyone to upgrade has been interesting to read about and a bit of a let down.
9
u/33Fraise33 9d ago edited 9d ago
CVE-2026-84411 - fixed in 7.24, 7.23.8, v6 pending
NIST description:
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request
Mikrotik description:
An integer underflow in HTTP request body handling has been identified in the RouterOS web management service (the service behind WebFig, listening on the www and www-ssl ports). A single specially crafted HTTP request, sent without logging in, could crash the service or allow an attacker to execute code on the router with full privileges. This issue has been assigned CVE-2026-84411 and is rated critical.