Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking
ID: 078654f0-b4d6-52ad-95e4-2ffba67023d4
STIX ID: report--078654f0-b4d6-52ad-95e4-2ffba67023d4
Feed Name: CISecurity.org Advisories
Threat Score
Multiple critical MikroTik RouterOS vulnerabilities could allow attackers to hijack administrator accounts and gain full device control without authentication. Notable issues include an SSH key modulus comparison bypass (CVE-2026-67276), an SSH username handling privilege escalation (CVE-2026-86060), and a bandwidth-test service flaw that can leak kernel memory or crash devices (CVE-2026-67277); exploiting the most severe could result in complete device takeover.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.