Latest / The Digital Warfare Podcast
EP. 158: Hackers Exploit MikroTik RouterOS Flaws to Take Over Routers
Summary
Attackers are actively exploiting a chain of vulnerabilities in MikroTik RouterOS known as MikroTrick. CERT Polska says it has observed attacks against internet-accessible RouterOS devices and confirmed that the vulnerability combination is being used to obtain full control of devices with SSH exposed to public networks.
The main chain combines CVE-2026-67276, an SSH authentication-bypass vulnerability rated CVSS 9.2, with CVE-2026-86060, another CVSS 9.2 vulnerability that can manipulate SSH session privileges and produce full administrative access.
MikroTik has released fixes in…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.