#RouterOS
LightNews LightNews
echobit.de
Kein Passwort. Kein SSH-Schlüssel. Keine Authentifizierung überhaupt. 😉
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Attackers chained two RouterOS SSH flaws to gain full admin access on Internet-exposed MikroTik routers before patches shipped.
thehackernews.com
September 24, 2026 at 10:28 AM
ctcwired.paradoxwolf.info
At MikroTik every time a new employee gets hired, the team celebrates by adding another way to do VLANs in RouterOS.
March 14, 2026 at 3:12 AM
ghostinthenet.bsky.social
New madness: DNS Bypass Mitigation on RouterOS

#NetEng #InfoSec #RouterOS #MikroTik

ghostinthenet.info/preventing-d...
DNS Bypass Mitigation with RouterOS
Can we block unauthorized use of DoH and DoQ from clients on our network without breaking HTTP and QUIC? Let's find out...
ghostinthenet.info
July 22, 2025 at 8:07 PM
bubbaprog.xyz
anyway yeah back online, my router exploded & my attempts to install three different router OSes (routerOS, pfsense, opnsense) all failed so here we are under iptables in MX Linux until the phone company sends a new one
January 27, 2026 at 1:14 AM
dju.eurosky.social
oops.. #mikrotik

thehackernews.com/2026/09/mikr...

(ping @hwaddr.bsky.social :p)
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Attackers chained two RouterOS SSH flaws to gain full admin access on Internet-exposed MikroTik routers before patches shipped.
thehackernews.com
September 25, 2026 at 10:10 AM
tweakers.net
RouterOS 7.16.2
RouterOS 7.16.2
tweakers.net
November 27, 2024 at 4:25 PM
hacker.at.thenote.app
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 for several RouterOS iss…
#hackernews #news
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 for several RouterOS issues at once, calling it an important security update without saying what it actually fixed. That silence was deliberate, and it didn’t last […]
securityaffairs.com
September 25, 2026 at 6:19 PM
ikehjames25.bsky.social
MikroTik RouterOS Vulnerability Chain Allows Unauthenticated Admin Access

Attackers are using a chain of two RouterOS vulnerabilities, known as MikroTrick, to bypass authentication and gain full control over MikroTik routers.
MikroTik RouterOS Vulnerability Chain Allows Unauthenticated Admin Access
Attackers are using a chain of two RouterOS vulnerabilities, known as MikroTrick, to bypass authentication and gain full control over MikroTik routers.
privacyneedle.com
September 23, 2026 at 4:42 PM
dragstersystems.bsky.social
MikroTik: detalles técnicos de explotación activa de dos vulnerabilidades de SSH en MikroTik RouterOS

Vía: @seguinfo.bsky.social
MikroTrick: detalles técnicos de explotación activa de dos vulnerabilidades de SSH en MikroTik RouterOS
blog.segu-info.com.ar
September 25, 2026 at 1:23 AM
cyberveille-ch.bsky.social
📢 MikroTrick : analyse technique de la chaîne CVE-2026-67279 + CVE-2026-86060 sur RouterOS

Cet article constitue une analyse technique approfondie de la chaîne de vulnérabilités MikroTrick, affectant MikroTik RouterOS. Les patches…

🟢 vérification factuelle haute
#RouterOS #MikroTik #Cyberveille
MikroTrick : analyse technique de la chaîne CVE-2026-67279 + CVE-2026-86060 sur RouterOS
Cet article constitue une analyse technique approfondie de la chaîne de vulnérabilités MikroTrick, affectant MikroTik RouterOS. Les patches ont été publiés le 3 septembre 2026 simultanément pour plusieurs branches maintenues : 7.25beta3, 7.24.2, 7.23.4 et 6.49.21. Le serveur SSH de RouterOS gérait incorrectement un rekey initié pendant la phase d'authentification.
cyberveille.ch
September 23, 2026 at 7:30 PM
ghostinthenet.bsky.social
No turkey and stuffing for me, but containers and VMs? Sure. Let's make #MikroTik #CHR images a bit friendlier for declarative #containerlab use. #RouterOS #NetEng #vrnetlab ghostinthenet.info/chr-in-conta...
MikroTik Cloud Hosted Router Images in containerlab
Pining for turkey and stuffing, I settled for containers and VMs instead. In the process, I've offered some advice on better use of RouterOS in containerlab.
ghostinthenet.info
November 28, 2025 at 3:57 AM
pestalella.eurosky.social
Per fi! RouterOS amb una interfície web moderna!
January 24, 2025 at 7:06 PM
thecircuitry.to
CISA added MikroTik RouterOS flaw CVE-2026-67279 to its Known Exploited Vulnerabilities catalog.

• SSH bug lets unauthenticated clients send exec requests

https://thecircuitry.to/article/cisa-adds-mikrotik-routeros-ssh-flaw-cve-2026-67279-to-kev-catalog-muhdvct3
September 25, 2026 at 7:58 PM
thehackernews.com.web.brid.gy
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at
thehackernews.com
September 23, 2026 at 5:13 PM
micaelsilva.com
Hoje meu desgraçamento mental ficou por conta do mau regex do TFTP do RouterOS
January 20, 2026 at 2:30 AM
micaelsilva.com
A raiva que eu tô passando tentando configurar o firewall do RouterOS....
September 5, 2026 at 8:40 PM
cvesentinel.bsky.social
🛑 CVE-2026-67279
MikroTik RouterOS
CVSS 6.9 / EPSS 1% / KEV: No
TL;DR: RouterOS SSH enters the connection protocol after a client-requested rekey even though us…
https://cvesentinel.com/report/CVE-2026-67279?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel
#infosec #CVE #vulnerability
September 25, 2026 at 3:23 PM
2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy
MTCSE preparation: MikroTik Security for RouterOS v6 & v7 Essential Security for RouterOS v7: MTCSE Ready ⏱️ Length: 1.9 total hours ⭐ 4.58/5 rating 👥 4,869 students 🔄 Oc...

#StudyBullet-22 #coupons #development #Education #Free #Courses #online […]

[Original post on studybullet.com]
May 12, 2026 at 7:38 PM
filippo.abyssdomain.expert
Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it.

Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.
CVE-2026-67276 - GitHub Advisory Database
RouterOS does not compare the complete RSA public key...
github.com
September 11, 2026 at 1:06 PM
jmrp.io
Mi RB5009 tenía un bucle de capa 2. Lo delataba el log del kernel, no el de RouterOS ni su monitor de puertos.

Lo vi con mikroscope, que he hecho: un agente Go en un contenedor de RouterOS, de 1 a 100 Hz, y una CLI que reenvía a 11 destinos. MIT.

github.com/jmrplens/mik...

#Mikrotik #OpenSource
El logo de mikroscope, nueve barras ámbar de distinta altura cruzadas por una línea plana a su media, con las tres del centro por encima, sobre el nombre mikroscope y el lema: telemetría de kernel por debajo del segundo desde dentro de un router MikroTik. Un panel titulado lo que RouterOS promedia o pasa por alto enumera cuatro cifras. En torno a 1 s: la carga de CPU en la API, una media móvil, 0,1 a 0,6 s tarde en dos horas medidas. 2,5 %: una ráfaga de 100 ms en un núcleo, en una media de 1 s y 4 núcleos, que no dice cuándo. 0: líneas del bucle en el log de RouterOS, con el kernel anotando el bucle de capa 2 cada 2 s. Unas 35 000: interrupciones del temporizador por segundo, en ráfagas de 20 a 90 s en un núcleo cada vez, desde unas 2 500, con Home Assistant consultando la API; el profile de RouterOS apenas lo mostró. Debajo: mikroscope corre en el router, en un contenedor, y lee los contadores del propio kernel de 1 a 100 Hz. Medido en un RB5009, RouterOS 7.24.2 y 7.24.4; el 2,5 % es aritmética. Al pie, github.com/jmrplens/mikroscope y: código abierto, MIT, RouterOS 7.24 o posterior, arm64, arm y x86_64. Cómo funciona mikroscope, en cuatro pasos numerados. 1, el kernel del router: /proc, /sys, /dev/kmsg y perf. El contenedor ve la CPU, interrupciones y memoria del router. 2, el agente, en un contenedor de RouterOS: binario Go estático en imagen scratch, sin conexión saliente. Muestrea de 1 a 100 Hz, 10 por defecto; guarda los últimos 60 s. Sirve deltas de ticks en bruto por HTTP en un veth /30. 3, el colector, a 11 destinos: con la API de RouterOS, añade el tráfico por interfaz a 1 Hz. Los destinos: fichero, Prometheus, InfluxDB 3, Loki, OTLP, Graphite, Elasticsearch, script SQL, PostgreSQL, Telegraf y salida estándar. 4, Grafana: 5 dashboards, uno por almacén, de 30 a 177 paneles. Reglas de alerta para InfluxDB 3, Prometheus y PostgreSQL. Lo que cuesta el agente a 10 Hz: 2,69 % de un núcleo, 13,2 MiB de memoria residente, 0 huecos y 0 pérdidas; RB5009UG+S+, RouterOS 7.24.2, 2026-09-18, una ventana de 300 s. Al final, doctor solo lee; install lista cada orden y pregunta antes, sobre dos órdenes: mikroscope doctor --router admin@192.168.88.1 y mikroscope install --router admin@192.168.88.1.
September 25, 2026 at 3:38 PM
deafnews-auto.bsky.social
MikroTrick: The SSH Chain That Empties RouterOS Before Login Even Happens
MikroTrick: The SSH Chain That Empties RouterOS Before Login Even Happens
The MikroTrick attack chain targets MikroTik RouterOS from at least September 2, 2026, allowing a remote attacker to gain full administrative control without a password, SSH key, or completed authentication. Active exploitation began one day before MikroTik released patches on September 3, 2026, mak
deafnews.it
September 23, 2026 at 5:09 PM
radwebhosting.com
How to Configure #RouterOS on a #MikroTik CHR #VPS Server This article provides a guide for how to configure RouterOS on a MikroTik CHR VPS server. MikroTik is an internationally acclaimed manufacturer of hardware such as modems, routers ...
Continued 👉 #vpsguide #kvmvps #installguide #mikrotikchr
How to Configure RouterOS on a MikroTik CHR VPS Server
blog.radwebhosting.com
September 23, 2026 at 12:30 AM
heisec.bsky.social
CERT Polska warnt vor aktiv ausgenutzten Lücken in MikroTik RouterOS. Über SSH lassen sich Router ohne Zugangsdaten komplett übernehmen. Update dringend nötig. #Security
MikroTrick: RouterOS-Lücken werden aktiv ausgenutzt – jetzt patchen
CERT Polska warnt vor aktiv ausgenutzten Lücken in MikroTik RouterOS. Über SSH lassen sich Router ohne Zugangsdaten komplett übernehmen. Update dringend nötig.
www.heise.de
September 7, 2026 at 12:15 PM
cybersecurity.poliverso.org.ap.brid.gy
MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 for several RouterOS issues at once, calling it an important security update without saying what it […]
Original post on poliverso.org
poliverso.org
September 24, 2026 at 6:24 PM
pingex.net
NAT64 on Mikrotik RouterOS !
October 25, 2023 at 4:03 AM