Security1 hOctober 16, 2026, 21:40

CERT Polska discloses MikroTrick chain in MikroTik RouterOS

CERT Polska disclosed the MikroTrick vulnerability chain in MikroTik RouterOS: CVE-2026-67276 bypasses SSH authentication and CVE-2026-86060 escalates to administrator via a crafted username. The flaws are already exploited in the wild; fixes shipped in 6.49.21, 7.23.4 and 7.24.2.

DEV Community

Open source

CVE-2026-67276 bypasses SSH credential checks without a password
CVE-2026-86060 escalates to admin via the -2 username
Fixes released in RouterOS 6.49.21, 7.23.4 and 7.24.2
Attack indicators: -2 logins, an ops account and Flagged status

#MikroTik#RouterOS

MikroTrick: log indicators and forensic checks for the RouterOS chain

Security

MikroTrick: Two RouterOS Flaws Let Attackers Take Over MikroTik Routers Without a Password

Security

CERT Polska details four-stage Android malware delivery chain

Security

CERT Polska discloses MikroTrick chain in MikroTik RouterOS

MikroTrick: log indicators and forensic checks for the RouterOS chain

MikroTrick: Two RouterOS Flaws Let Attackers Take Over MikroTik Routers Without a Password

CERT Polska details four-stage Android malware delivery chain

ZoomEye: 505,545 MikroTik RouterOS devices expose SSH to the internet