Utopia Tech
Security1 min read

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack log

UT

Utopia Tech

September 23, 2026 · 1 min read

Share

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

Originally published at thehackernews.com

#Cybersecurity#Malware#Vulnerabilities
Share
▸ Want a deeper look?

Talk to an architect about applying this to your stack.

60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.

Schedule the call
▸ Continue reading

More from the journal

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
Security

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

1 min read

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Security

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

1 min read

Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
Security

Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign

1 min read

All posts
Skip to main contentMikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key · Utopia Tech