NewsThe Hacker News2026-09-23 16:06 UTCICS / OT (industrial control)SME

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

CVE-2026-67279MikroTik RouterOS — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
CVE-2026-67279MikroTik RouterOS: Mehrere Schwachstellen
CVE-2026-67279RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated c…
CVE-2026-86060MikroTik RouterOS — MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
CVE-2026-86060RouterOS contains an argument-handling flaw in the SSH login
CVE-2026-86060mikrotik routeros: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVE-2026-67279mikrotik routeros: Improper Enforcement of Behavioral Workflow

Other news entries

Newscsoonline2026-09-09
MikroTik patches flaws currently being exploited to take over routers
Newssecurityweek2026-09-08
MikroTik Patches Critical Flaws Chained to Hack Routers
Newsheise-security
MikroTrick: RouterOS-Lücken werden aktiv ausgenutzt – jetzt patchen

Source: https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html

Linked advisories

More on MikroTrick