Security
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
The Hacker News·September 23, 2026·1 min read
Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, called MikroTrick by CERT Polska, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug (CVE-2026-86060). Attack logs date to at least early 2026.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.