MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Home / Tech / MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

September 24, 2026 dirk 0 Comments 3 tags

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication.

The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

Source: The Hacker News

Explore More

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals

U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals Read on The Hacker News Source: The Hacker News

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under