MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication.

The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Flat Chair by Sara Paculdo

Flat Chair by Sara Paculdo Source: Hacker News

Woman stranded in Spain after UK’s eVisa system mistakes her for twin sister

Woman stranded in Spain after UK’s eVisa system mistakes her for twin sister Source: Hacker News

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design,