MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication.

The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls Researchers at the security firm Calif have built a worm that takes over a WeChat account via

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 27.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 600 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.244.66.232 — 181 requests (recent

Read More

Ask HN: Why are OpenAI, Claude, and Grok simultaneously down? Coincidence?

Ask HN: Why are OpenAI, Claude, and Grok simultaneously down? Coincidence? Source: Hacker News

Read More