NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in MikroTik RouterOS
view advisory published 2026-09-08
MikroTik heeft meerdere kwetsbaarheden verholpen in RouterOS.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86060US | critical9.8OT critical | KEV | ||
RouterOS contains an argument-handling flaw in the SSH login
path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be ch… | ||||
| CVE-2026-67277US | high8.2OT critical | KEV | ||
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 U… | ||||
| CVE-2026-67276US | high8.1OT critical | Exploit | ||
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the expo… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan