Every minute you delay upgrade, is more risk for compromise.
All I can reveal in this moment is that administrative access ports should be protected from untrusted networks (internet), and segmented in separate VLAN in large internal networks. Do not expose Winbox, Webfig, SSH to internet, use a firewall and access your device with a strong VPN like Wireguard.
Do this if you can't upgrade.