EIP-2026-118899

This exploit targets Mikrotik RouterOS WinBox (versions 6.29-6.42) to extract administrative credentials, including deleted or disabled users, by sending crafted payloads to the WinBox port (default 8291). It decrypts passwords using a hardcoded MD5-based algorithm and reports credentials via Metasploit.