Tag: routeros
4 articles
CISA Warns of Pre-Auth Flaw in MikroTik RouterOS
A critical vulnerability in MikroTik RouterOS, known as CVE-2026-84411, can be exploited with a single crafted request, allowing attackers to execute code with root privileges or cause a denial-of-service condition, even without authentication. This flaw puts your network at risk, and it's essential to take immediate action to protect yourself.
MikroTik Routers Targeted in Pre-Patch Exploits
Hackers are exploiting two critical flaws in MikroTik routers, allowing them to gain full control of internet-exposed devices even before patches were available. The "MikroTrick" chain, which combines two vulnerabilities, lets attackers open a privileged console without needing login credentials.
CISA Flags Actively Exploited Flaws in Artifactory, ScreenConnect, RouterOS
CISA has flagged five severe vulnerabilities in popular software, including JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS, that are being actively exploited by attackers to gain unauthorized control. These flaws are now added to CISA's Known Exploited Vulnerabilities catalog, serving as a wake-up call for operators to prioritize patching before they become the next target.
Hackers Exploit MikroTik Router Flaws to Hijack Devices
Hackers are actively exploiting vulnerabilities in MikroTik RouterOS, using a two-step attack dubbed "MikroTrick" to hijack devices, warns Poland's Computer Emergency Response Team. The team has confirmed that the critical severity flaws, tracked as CVE-2026-67276 and CVE-2026-86060, are being used in real-world attacks.