#mikrotik — Public Fediverse posts

Endlich: Nachdem die Hardware für das neue #TTN Gateway schon etliche Monate auf meinem Schreibtisch reifte, wurde heute die neue #LoRaWAN Basis in Betrieb genommen. Die Installation ist noch ein wenig provisorisch und soll noch nach draußen wandern, aber sie ist online!

#TheThingsNetwork #IoT #MikroTik #Maker

Installed some quiet fans in the mikrotik switch. Peace has returned. #homelab #mikrotik #noctua

Aren’t the devices on the list supposed to be the very ones that are meant to make networks more secure...? #AskingForAFriend

Source: https://cve.threatint.com

#cyber #security #mikrotik #cisco #citrix #fortinet

Aren’t the devices on the list supposed to be the very ones that are meant to make networks more secure...? #AskingForAFriend

Source: https://cve.threatint.com

#cyber #security #mikrotik #cisco #citrix #fortinet

Aren’t the devices on the list supposed to be the very ones that are meant to make networks more secure...? #AskingForAFriend

Source: https://cve.threatint.com

#cyber #security #mikrotik #cisco #citrix #fortinet

Aren’t the devices on the list supposed to be the very ones that are meant to make networks more secure...? #AskingForAFriend

Source: https://cve.threatint.com

#cyber #security #mikrotik #cisco #citrix #fortinet

Trois CVE sur MikroTik RouterOS — des équipements massivement déployés en ISP, entreprises et réseaux embarqués. MikroTik est régulièrement dans le viseur des botnets depuis des années. La surface d'attaque est large, les mises à jour pas toujours automatiques. Un rappel utile de surveiller ses routiers de près. #infosec #CVE #MikroTik
https://malware.news/t/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-and-cve-2026-86060/125517

Trois CVE sur MikroTik RouterOS — des équipements massivement déployés en ISP, entreprises et réseaux embarqués. MikroTik est régulièrement dans le viseur des botnets depuis des années. La surface d'attaque est large, les mises à jour pas toujours automatiques. Un rappel utile de surveiller ses routiers de près. #infosec #CVE #MikroTik
https://malware.news/t/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-and-cve-2026-86060/125517

CVE Alert: CVE-2026-67277 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-67277-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-67277 #mikrotik #routeros

CVE Alert: CVE-2026-86060 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86060-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-86060 #mikrotik #routeros

CVE Alert: CVE-2026-67277 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-67277-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-67277 #mikrotik #routeros

CVE Alert: CVE-2026-86060 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86060-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-86060 #mikrotik #routeros

CVE Alert: CVE-2026-67277 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-67277-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-67277 #mikrotik #routeros

CVE Alert: CVE-2026-86060 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86060-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-86060 #mikrotik #routeros

CVE Alert: CVE-2026-67277 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-67277-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-67277 #mikrotik #routeros

CVE Alert: CVE-2026-86060 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86060-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-86060 #mikrotik #routeros

CVE Alert: CVE-2026-67277 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-67277-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-67277 #mikrotik #routeros

CVE Alert: CVE-2026-86060 - Mikrotik - RouterOS - https://www.redpacketsecurity.com/cve-alert-cve-2026-86060-mikrotik-routeros/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-86060 #mikrotik #routeros

@k Hi! I loved your #ReverseEngineering work on #MikroTik RouterOS... if you're still interested, it looks like a new local code execution vuln dropped as part of this week's emergency update:

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/#:~:text=From%20crash%20to%20controlled%20EIP

It's not covered by the CVEs in https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ but it got fixed in the same firmware. Any chance to escalate that into a persistent busybox? 😉

@k Hi! I loved your #ReverseEngineering work on #MikroTik RouterOS... if you're still interested, it looks like a new local code execution vuln dropped as part of this week's emergency update:

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/#:~:text=From%20crash%20to%20controlled%20EIP

It's not covered by the CVEs in https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ but it got fixed in the same firmware. Any chance to escalate that into a persistent busybox? 😉

@k Hi! I loved your #ReverseEngineering work on #MikroTik RouterOS... if you're still interested, it looks like a new local code execution vuln dropped as part of this week's emergency update:

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/#:~:text=From%20crash%20to%20controlled%20EIP

It's not covered by the CVEs in https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ but it got fixed in the same firmware. Any chance to escalate that into a persistent busybox? 😉

@k Hi! I loved your #ReverseEngineering work on #MikroTik RouterOS... if you're still interested, it looks like a new local code execution vuln dropped as part of this week's emergency update:

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/#:~:text=From%20crash%20to%20controlled%20EIP

It's not covered by the CVEs in https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ but it got fixed in the same firmware. Any chance to escalate that into a persistent busybox? 😉

@k Hi! I loved your #ReverseEngineering work on #MikroTik RouterOS... if you're still interested, it looks like a new local code execution vuln dropped as part of this week's emergency update:

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/#:~:text=From%20crash%20to%20controlled%20EIP

It's not covered by the CVEs in https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ but it got fixed in the same firmware. Any chance to escalate that into a persistent busybox? 😉

@D_70WN Mikrotik Switches, Smarthome auf FOSS-Basis ohne Zugang zum Internet. SmartTV in Form von Mini-PC mit Linux/Kodi. Ansonsten desgleichen.

#Mikrotik #FOss #Kodi

@D_70WN Mikrotik Switches, Smarthome auf FOSS-Basis ohne Zugang zum Internet. SmartTV in Form von Mini-PC mit Linux/Kodi. Ansonsten desgleichen.

#Mikrotik #FOss #Kodi

@D_70WN Mikrotik Switches, Smarthome auf FOSS-Basis ohne Zugang zum Internet. SmartTV in Form von Mini-PC mit Linux/Kodi. Ansonsten desgleichen.

#Mikrotik #FOss #Kodi

@D_70WN Mikrotik Switches, Smarthome auf FOSS-Basis ohne Zugang zum Internet. SmartTV in Form von Mini-PC mit Linux/Kodi. Ansonsten desgleichen.

#Mikrotik #FOss #Kodi

@scottgal or #MikroTik

Hackers exploit new #MikroTik #RouterOS flaws to hijack routers

https://www.bleepingcomputer.com/news/security/hackers-exploit-new-mikrotik-routeros-flaws-to-hijack-routers/

#cybersecurity #router

Does anyone know if searching for "login failure for user -2" as suggested by CERT.PL is sufficient to find all cases of exploration, or if there are different strings that indicate (successful) exploitation?

CERT.PL's post for reference: https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

#mikrotik #MikroTrick

#zTisku
https://www.chip.cz/bezpecnost/routery-aktualizace

Tak SSH, WEB rozhraní mám zakázané úplně. Porty z venku pro tyto přístupy pro jistotu blokované.
Přístup pomocí WINBOX mám přes speciální port, jen z jedné VLAN kam se dostanu jen a jen já.
Mám blokované i stahování update, musím ručně - co nechápu - stáhnete si od #Mikrotik SW, RourerOS ale nikde žádné kontrolní klíče/součty pro kontrolu zda jsem nestáhl podvržený soubor 🤷‍♂️

Два года, один человек, 66 контейнеров: как я построил AI‑платформу на железе под столом

Привет, Хабр. 26 августа 2024 года я получил у BotFather первый токен и написал кривой телеграм‑бот с одной моделью — обычная история «хочу ChatGPT без танцев с бубном, сделаю себе сам». Бот был честно плохой: одна модель, никакого контекста, падал от длинных сообщений. Но он работал, им начали пользоваться дети и знакомые, и я решил «немного доделать». «Немного доделать» продолжается второй год. Сейчас это платформа с веб‑приложением, шестью каналами доставки (Telegram, VK, MAX, Discord, веб и — для уведомлений и результатов долгих задач — email), биллингом, голосовым агентом и RAG по документам. А под ней — 66 контейнеров на двух нодах, BGP‑маршрутизация, собственный CI, хелпдеск и GPU‑нода с локальными моделями. Всё на железе, которое стоит под столом и потребляло меньше, чем игровая приставка, — до недавнего появления второй ноды с 3090; теперь приставка нервно курит. Эта статья — про то, во что превращается домашняя инфраструктура, когда backend‑разработчик два года не может остановиться. Пишу это по двум причинам. Во‑первых, когда я начинал, мне отчаянно не хватало такой статьи — целостной картины, как это выглядит, когда селф‑хостишь ВСЁ. Во‑вторых, я почти наверняка делаю что‑то не так, и комментарии Хабра — самый быстрый способ об этом узнать. Не стесняйтесь.

https://habr.com/ru/articles/1080138/

#selfhosted #домашний_сервер #docker #mikrotik #bgp #postgresql #prometheus #gitea #gpu #ollama

Link is up, but the internet is dead? Basic MikroTik failover won't catch it. Set up recursive routing to test actual WAN connectivity and guarantee zero downtime. #MikroTik #Networking #SysAdmin

https://www.valtersit.com/guides/networking/dual-wan-failover-because_my_internet_is_down_is_not_an_option/

Дайджест ИБ, 1–7 сентября: GPT-6 Astra в проде, зарубежные NGFW теряют долю, утечка 153 млн прав

Двадцать новостных сюжетов по информационной безопасности за неделю 1-7 сентября: yязвимости, искусственный интеллект, атаки и утечки, рынок и сделки, регулирование Дайджест собран по данным автоматического агрегатора новостей из 240 источников: за семь дней прочитано ~11 653 материала, ~1 267 из них от профильных изданий, вендоров и регуляторов. Читать дайджест

https://habr.com/ru/articles/1079912/

#дайджест #информационная_безопасность #уязвимости #0day #MikroTik #SonicWall #NGFW #утечки_данных #ИИагенты #цепочка_поставок

The TL;DR: if you use #Mikrotik routers you should drop everything, update RouterOS and reboot. NOW.

https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

@mikrotik It is ABSOLUTELY INEXCUSABLE to be using some DIY (and clearly half-baked!) SSH implementation instead of something well-tested and trustworthy like #OpenSSH.

https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

PoC is already in the wild: https://github.com/dinosn/mikrotrick-poc

#mikrotik #mikrotrick #security #283i4jfkai3389

🚨 SIGINT // Cybersecurity Watch — 2026-09-08
Attackers hijack internet-exposed MikroTik routers via SSH, no auth needed, planting rogue privileged accounts for persistence.
https://thehackernews.com/2026/09/attackers-hijack-mikrotik-routers.html
#InfoSec #Cybersecurity #MikroTik #NetworkSecurity

#MikroTik RouterOS, falle critiche già sfruttate: disponibile l'aggiornamento
https://go.squidapp.co/n/IqPtG8x

MikroTik FastTrack gives you 1Gbps speeds, but it silently breaks your QoS, VPNs, and firewall rules. Learn how the kernel bypass works and when to disable it. #MikroTik #Networking #RouterOS

https://www.valtersit.com/guides/networking/mikrotik_fasttrack-the_performance_miracle_that_breaks_your_firewall/

📰 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit

🚨 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity

🔗 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

Hackers Exploit MikroTik Router Flaws to Hijack Devices

Hackers are actively exploiting vulnerabilities in MikroTik RouterOS, using a two-step attack dubbed "MikroTrick" to hijack devices, warns Poland's Computer Emergency Response Team. The team has confirmed that the critical severity flaws, tracked as CVE-2026-67276 and CVE-2026-86060, are being used in real-world attacks.

https://osintsights.com/hackers-exploit-mikrotik-router-flaws-to-hijack-devices?utm_source=mastodon&utm_medium=social

#Mikrotik #Routeros #Mikrotrick #EmergingThreats #SupplyChain

In a nutshell, IF you’ve removed the default #MikroTik firewall or you’ve opened up SSH login to the entire world you’re at risk. One Reddit user has reported over a dozen of their routers were compromised on 2nd Sept. None of those devices had a firewall configured to block access to any management ports. For anyone who’s been on one of my MTCNAs you’d know best practise already. This is really basic stuff here guys. #MikroTrick https://infosec.exchange/@securityaffairs/117224409392129238

#MikroTik RouterOS: #Schwachstellen werden ausgenutzt, updaten

Kritische Sicherheitslücken in MikroTik RouterOS werden ausgenutzt (Sept. 2026)

Krytyczne luki w MikroTiku, umożliwiające przejęcie urządzenia przez SSH. Łatajcie się pilnie.

Chodzi o krytyczne podatności, które są aktywnie wykorzystywane przez atakujących, a szczegóły luk są wręcz… nieprawdopodobne. Cytaty za CERT Polska, który zgłosił do MikroTika luki: W skrócie – można dostać się na Mikrotiki z poziomu Internetu, bez jakiegokolwiek uwierzytelnienia… Łatajcie się. ~ms

#WBiegu #Iot #Mikrotik #Podatność #Ssh

https://sekurak.pl/krytyczne-luki-w-mikrotiku-umozliwiajace-przejecie-urzadzenia-przez-ssh-latajcie-sie-pilnie/

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Sometimes figuring out whats happening over time in the Mikrotik changelogs isn't as easy as it should be..... I made a tool to display changelog entries and data in different ways, as well as searching all changelogs for keywords. (MLAG for instance is a good search keyword).

This is still in really early public availability, but its been useful for 2 out of 2 people I shared it with and so I expect it will be useful for a wider audience.

https://mikrotik-changelog-tracker.hextet.net/

#mikrotik #changelogs #neteng #netops #networking #networks

In today's #fuckshit with #mikrotik. Hardware is kinda Fire.. The way you guys do shit is weird! At the very least this shit is not for rest of us. VyOS software router didn't take this much brain power to get going. I finally got my network moved over to it. I needed to add bridge, vlans, vlan interfaces, trunk ports in bridges, add interfaces and vlan interfaces to bridges, add interfaces to interfaces lists to allow firewalls shit, add address pools, then dhcp servers, and then add networks ( which are not vlans). I still have not set up PBR. And before you come at me with this, "do you even network bro bullshit"!! NO! I don't.. I'm not sure this fucking thing networks without you getting drugged in in a foreign country for your kidneys!!

Now don't get me wrong( or get me all the way wrong)!!! The software is a POS 🤣 It's powerful, I'm sure! You just need to kill a baby unicorn goat! Then it might do what you want it to!

#homelab #selfhosted #selfhosting #i #am #Kidding