Security1 hSeptember 24, 2026, 09:40

MikroTik patches three RouterOS flaws, including SSH auth bypass

MikroTik's September 2026 security release fixes three RouterOS vulnerabilities: CVE-2026-67276 allows SSH authentication bypass with a forged RSA key, CVE-2026-86060 enables privilege escalation after login, and CVE-2026-67277 causes denial of service via the btest service. Versions up to 7.24.2, 7.23.4 and 6.49.21 are affected.

DEV Community

Open source

MikroTik patches three RouterOS flaws, including SSH auth bypass

CVE-2026-67276: SSH auth bypass grants full admin access without credentials
CVE-2026-86060: privilege escalation via crafted arguments in an SSH session
CVE-2026-67277: unauthenticated btest reads kernel memory and crashes routers
Affected versions up to 7.24.2, 7.23.4 and 6.49.21

#MikroTik#RouterOS

Claude Code deny rule Bash(git push:*) stopped 8 of 14 push variants

Security

Red Hat warns AI is driving a surge in cyber threats and faster exploits

Security

FBI: fake cop scams cost victims $1.6 billion

Security

MikroTik patches three RouterOS flaws, including SSH auth bypass

Claude Code deny rule Bash(git push:*) stopped 8 of 14 push variants

Red Hat warns AI is driving a surge in cyber threats and faster exploits

FBI: fake cop scams cost victims $1.6 billion

Chinese authorities reportedly hold F-35 components in Hong Kong