06 September 2026 - 18:04

Category: IT Fail

Another Day, Another MikroTik Zero-Day

The 'MikroTrick' exploit cheerfully gives full admin access to exposed MikroTik RouterOS devices. Why bother with passwords when a zero-day does the job?

Another Day, Another MikroTik Zero-Day

Source: Security Affairs

The Full Story

Severity: Critical Mood: Frustrating

Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, or 6.49.21 while hunting for rogue user '-2' that has already made itself comfortable. Same story, different day, pretending that our perimeter defence was ever actually working.

#HereWeGoAgain #MikroTikFail
Open article →