SecurityThe Hacker Newsabout 2 hours ago
MikroTrick Chain Hijacks MikroTik Routers
5 min read
Two RouterOS SSH flaws, CVE-2026-67279 and CVE-2026-86060, let attackers gain full admin control of Internet-exposed MikroTik routers without a password or SSH key. Attack logs date to September 2, one day before patches shipped in RouterOS 6.49.21, 7.23.4 and 7.24.2. CISA added CVE-2026-86060 to its Known Exploited Vulnerabilities catalog on September 10.
Level
Hype check
Tap to vote and see what everyone thinks.