#mikrotik — Public Fediverse posts

Hackers Exploit MikroTik Router Flaws to Hijack Devices

Hackers are actively exploiting vulnerabilities in MikroTik RouterOS, using a two-step attack dubbed "MikroTrick" to hijack devices, warns Poland's Computer Emergency Response Team. The team has confirmed that the critical severity flaws, tracked as CVE-2026-67276 and CVE-2026-86060, are being used in real-world attacks.

https://osintsights.com/hackers-exploit-mikrotik-router-flaws-to-hijack-devices?utm_source=mastodon&utm_medium=social

#Mikrotik #Routeros #Mikrotrick #EmergingThreats #SupplyChain

In a nutshell, IF you’ve removed the default #MikroTik firewall or you’ve opened up SSH login to the entire world you’re at risk. One Reddit user has reported over a dozen of their routers were compromised on 2nd Sept. None of those devices had a firewall configured to block access to any management ports. For anyone who’s been on one of my MTCNAs you’d know best practise already. This is really basic stuff here guys. #MikroTrick https://infosec.exchange/@securityaffairs/117224409392129238

#MikroTik RouterOS: #Schwachstellen werden ausgenutzt, updaten

Kritische Sicherheitslücken in MikroTik RouterOS werden ausgenutzt (Sept. 2026)

Krytyczne luki w MikroTiku, umożliwiające przejęcie urządzenia przez SSH. Łatajcie się pilnie.

Chodzi o krytyczne podatności, które są aktywnie wykorzystywane przez atakujących, a szczegóły luk są wręcz… nieprawdopodobne. Cytaty za CERT Polska, który zgłosił do MikroTika luki: W skrócie – można dostać się na Mikrotiki z poziomu Internetu, bez jakiegokolwiek uwierzytelnienia… Łatajcie się. ~ms

#WBiegu #Iot #Mikrotik #Podatność #Ssh

https://sekurak.pl/krytyczne-luki-w-mikrotiku-umozliwiajace-przejecie-urzadzenia-przez-ssh-latajcie-sie-pilnie/

Attackers Exploit MikroTik Routers via Exposed SSH

Hackers are actively exploiting MikroTik routers with exposed SSH services to gain full control, with successful attacks dating back to at least September 2. This critical vulnerability allows attackers to bypass authentication and take control of your router, putting your entire network at risk.

https://osintsights.com/attackers-exploit-mikrotik-routers-via-exposed-ssh?utm_source=mastodon&utm_medium=social

#Mikrotik #SshExploitation #EmergingThreats #RouterVulnerability #CertPolska

VLANs on #MikroTik are just guesswork and prayer. Especially with wifi interfaces.

#Mikrotik - if you are using Mikrotik routers you should immediately upgrade to the latest version due to the undisclosed security #vulnerability in RouterOS.

Fixes included in versions:

* 7.25 beta 3

* 7.24.2

* 7.23.4

* 6.49.21

Vendor advisory:

https://mikrotik.com/supportsec/september-2026-vulnerability/

RE: https://www.impulsait.com/actualizacion-de-seguridad-mikrotik-septiembre-2026/

Atención para quienes administran equipos de red de la marca @mikrotik

La empresa Mikrotik ha anunciado una actualización de seguridad importante en su sistema operativo. En nuestro sitio pueden encontrar una guía paso a paso cómo realizar una actualización del software de equipos Mikrotik.

#Mikrotik #Ciberseguridad #RouterOS

Actualización de Seguridad Mikrotik Septiembre 2026

https://www.impulsait.com/actualizacion-de-seguridad-mikrotik-septiembre-2026/

A critical MikroTik RouterOS security update patches a severe vulnerability. Protect your devices immediately from emerging router compromise threats.

#MikroTik #RouterOS #CyberSecurity #NetworkSecurity #TechNews

https://securityonline.info/mikrotik-routeros-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

On the 22nd Sept 2026 we return to Central London to deliver a #MikroTik MTCRE training. Loads of theory, labs and practical tips and examples of how to use OSPF correctly with RouterOS. Seats still available. You can even take or retake the MTCNA exam for free as well. https://mikrotiktraining.co.uk/product/mikrotik-mtcre-training-course/

Aktualizujcie swoje urządzenia #Mikrotik

https://mikrotik.com/supportsec/september-2026-vulnerability/

CERT Polska:
https://moje.cert.pl/komunikaty/2026/161/krytyczne-aktualizacje-bezpieczenstwa-w-urzadzeniach-mikrotik/

#bezpieczeństwo #router #sieć

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

Reversing MikroTik's Silent Patch: The RouterOS 7.23.4 Fix They Wouldn't Explain

https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/

Comments: https://news.ycombinator.com/item?id=49571627

#HackerNews #Reversing #MikroTik #Silent #Patch #RouterOS #Fix #Cybersecurity #Networking #TechNews

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

@securitym0nkey @mikrotik My take is if the management services (especially SSH) are not able to be connected to by unauthorised sources, the device isn’t vulnerable, regardless of what version it has on it. If #MikroTik have not published more details it could also be because there isn’t anything more to be said. They have provided us with a suggested action plan and for us we now know that no action is required immediately but at the next maint window we will upgrade. Until then we will test.

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Auch wenn Mikrotik dazu noch nichts schreibt: Es ist ein SSH-Auth-Bypass. Also: Wenn SSH zum bösen Internet offen wahr, lieber einmal genauer auf die Router schauen. #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

Kurzes Heads-Upd für mikrotik-Admins: Es gibt eine aktiv ausgenutzte Sicherheitslücke: https://mikrotik.com/supportsec/september-2026-vulnerability/ (TIL: https://manual.mikrotik.com/docs/system-information-and-utilities/device-mode/#flagged-status) #mikrotik

sooooo. was lange währt wird endlich... auf jeden fall funktionierts.

habe eben die #fritzbox #fiber und den #ubiquitiy #edgerouter lite durch 1 #mikrotik hex s ersetzt. strom bekommt dieser per #poe vom miktrotik hap ac, der mir im keller als Switch, Glas Uplink in den ersten Stock, Access Point und #Capsman dient. #CleanInstallationDay