MikroTik security advisory (AV26-1029)
Canadian Cyber Centre says MikroTik RouterOS before 7.24.5 is vulnerable and should be updated.
32
Vendor
MikroTik
- Mentions · 7d0
- Mentions · 30d3
- All mentions30
- First seenAug 19, 2026
- Last mentioned17d ago
Timeline
30 articles · newest firstMikroTik security advisory (AV26-992)
Canada's Cyber Centre urges updates for MikroTik RouterOS before 7.24 over CVE-2026-84411.
36
Critical MikroTik RouterOS Flaw Lets Unauthenticated Attackers Execute Code as Root
Unauthenticated MikroTik RouterOS flaw CVE-2026-84411 could let remote attackers execute code as root.
74
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
CISA warns MikroTik RouterOS below 7.24 has critical pre-auth RCE CVE-2026-84411, with no known exploitation.
74
Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution
CISA warns unauthenticated attackers can exploit critical MikroTik RouterOS flaw CVE-2026-84411 for remote code execution.
74
MikroTik RouterOS
Unauthenticated integer underflow in MikroTik RouterOS before 7.24 can give remote root code execution.
80
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
CISA listed actively exploited SharePoint RCE and MikroTik RouterOS flaws in the KEV catalog.
88
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
CISA added exploited Microsoft SharePoint and MikroTik RouterOS flaws to KEV, due September 28.
85
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
CISA says attackers are exploiting critical WSO2 and Adobe Commerce flaws plus SharePoint and MikroTik bugs.
84
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added actively exploited SharePoint and MikroTik RouterOS flaws to the Known Exploited Vulnerabilities catalog.
80
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two MikroTik RouterOS flaws for unauthenticated admin access, with exploitation seen before patches.
86
MikroTik security advisory (AV26-958)
Canada's Cyber Centre warns MikroTik RouterOS before 7.25beta5 is vulnerable and urges updates.
38
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Attackers chained two MikroTik RouterOS SSH flaws to seize internet-exposed routers without authentication; CISA lists one in KEV.
86
MikroTrick Attack Lets Hackers Gain Full Admin Control of MikroTik Routers Without Login
Bishop Fox's MikroTrick chains CVE-2026-67279 and CVE-2026-86060 to gain unauthenticated admin control of internet-exposed MikroTik RouterOS devices, with compromise evidence.
78
Hackers Exploit MikroTik Vulnerabilities to Take Over MikroTik Routers Without Authentication
Attackers chained SSH authentication bypass CVE-2026-67276 and privilege flaw CVE-2026-86060 to fully hijack internet-exposed MikroTik routers before patches existed.
85
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar
Lumen's Black Lotus Labs uncovered BambooToken, a Windows and Linux malware family using MQTT broker-based C2 and DLL sideloading across Asia since February 2023.
56
CISA Adds Exploited MikroTik RouterOS Flaws to Security Alert
CISA added two actively exploited MikroTik RouterOS flaws, CVE-2026-67277 and CVE-2026-86060, to its KEV catalog with a September 13 mitigation deadline.
78
AL26-020 - Vulnerabilities Impacting MikroTik RouterOS - CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060
Canada's Cyber Centre warns of three exploited MikroTik RouterOS vulnerabilities affecting SSH-exposed devices; CISA added two to its KEV catalog.
72
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added two actively exploited MikroTik RouterOS vulnerabilities, CVE-2026-67277 and CVE-2026-86060, to its KEV catalog, mandating federal remediation.
72
MikroTik patches flaws currently being exploited to take over routers
MikroTik patches six RouterOS flaws, including the actively exploited MikroTrick SSH chain (CVE-2026-67276, CVE-2026-86060) enabling unauthenticated full router takeover.
82
Mikrotik security advisory (AV26-887)
Canada's Cyber Centre urges MikroTik RouterOS updates as CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060 are reported exploited in the wild.
70
MikroTik Patches Critical Flaws Chained to Hack Routers
MikroTik patches six RouterOS flaws; two chained as MikroTrick are actively exploited via SSH to fully compromise exposed routers.
84
MikroTik router flaws allow takeover without a password
Attackers actively exploit chained MikroTik RouterOS SSH flaws CVE-2026-67276 and CVE-2026-86060, bypassing authentication and escalating to admin to seize edge routers.
78
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.
72
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Attackers actively exploit a MikroTik RouterOS SSH authentication bypass and privilege escalation chain, dubbed MikroTrick, to fully hijack internet-exposed routers.
82
Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication
CERT Polska confirms attackers exploit chained MikroTik RouterOS SSH flaws to hijack devices without authentication; patches released in four RouterOS versions.
82
Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th)
MikroTik patched a critical SSH authentication bypass already exploited in the wild; attackers add accounts to affected routers for post-patch persistence.
82
Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”
MikroTik RouterOS SSH auth-bypass chain MikroTrick (CVE-2026-67276 plus CVE-2026-86060) is actively exploited; patch to 7.24.2/7.23.5/6.49.21.
88
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
CERT Polska warns attackers exploit internet-exposed MikroTik SSH for unauthenticated full admin control; attacks observed since at least September 2.
75
FrostyGoop’s Zoom-In: A Closer Look into the Malware Artifacts, Behaviors and Network Communications
Unit 42 dissects FrostyGoop OT malware, which sent Modbus TCP commands to disrupt heating for 600+ apartment buildings in Ukraine.
58
Related CVEs
by mentions- CVE-2026-860606%9.2Argument-Injection Flaw in MikroTik RouterOS SSH Login Enables Privilege Escalation
- CVE-2026-672769%9.2SSH RSA Authorized-Key Bypass in MikroTik RouterOS 7.x
- CVE-2026-672792%6.9Unauthenticated SSH Session Bypass Enables File Writes in MikroTik RouterOS
- CVE-2026-672772%8.8Unauthenticated Kernel Crash and Memory Leak in MikroTik RouterOS btest
- CVE-2026-84411<1%9.3Pre-auth integer underflow RCE in MikroTik RouterOS
- CVE-2026-656608%8.8Authenticated Code Injection RCE in Microsoft SharePoint Server
- CVE-2026-67281<1%8.7Unauthenticated Arbitrary File Read in MikroTik RouterOS WebFig (CVE-2026-67281)
- CVE-2026-67278<1%6.3X.509 Signature Forgery Enables TLS Impersonation in MikroTik RouterOS 7.x
- CVE-2026-543022%10.0Unauthenticated JWT Algorithm Bypass in WSO2 API Manager and Gateways
- CVE-2026-7136290%9.1Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
Appears with
- RouterOSproduct · 28
- CERT Polskaorganization · 13
- CISAorganization · 10
- Canadian Centre for Cyber Securityorganization · 5
- Microsoftvendor · 4
- GPT-5.5-cyberai model · 4
- GPT-5.6-solai model · 3
- MikroTikorganization · 3
- Bishop Foxorganization · 3
- OpenAIorganization · 3
- Shadowserver Foundationorganization · 3
- Magentoproduct · 2
- SharePointproduct · 2
- CISAvendor · 2
- Adobevendor · 2
- Adobe Commerceproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.