EIP-2026-118899
PRE-CVEMikrotik WinBox 6.42 - Credential Disclosure (Metasploit)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118899. PoCs published by Omid Shojaei.
AI-analyzed exploit summary This exploit targets Mikrotik RouterOS WinBox (versions 6.29-6.42) to extract administrative credentials, including deleted or disabled users, by sending crafted payloads to the WinBox port (default 8291). It decrypts passwords using a hardcoded MD5-based algorithm and reports credentials via Metasploit.
Description
Mikrotik WinBox 6.42 - Credential Disclosure (Metasploit)
Exploits (1)
This exploit targets Mikrotik RouterOS WinBox (versions 6.29-6.42) to extract administrative credentials, including deleted or disabled users, by sending crafted payloads to the WinBox port (default 8291). It decrypts passwords using a hardcoded MD5-based algorithm and reports credentials via Metasploit.