CERT24AI Helps Uncover the MikroTrick Attack Chain in MikroTik RouterOSLoading data…
CERT24Threat Observatory
Period

AI Helps Uncover the MikroTrick Attack Chain in MikroTik RouterOS

CERT Polska identified two chainable vulnerabilities in MikroTik RouterOS, referred to as MikroTrick. CVE-2026-67279 allowed an unauthenticated client to create a session channel, while CVE-2026-86060 allowed control of the privilege mask supplied to the login process, potentially giving an attacker full administrative access without a password, SSH key, or successful authentication. According to the source, the attack chain was used in the wild before patches were released.

← Back to intelligence

AI Helps Uncover the MikroTrick Attack Chain in MikroTik RouterOS

CERT Polska identified two chainable vulnerabilities in MikroTik RouterOS, referred to as MikroTrick. CVE-2026-67279 allowed an unauthenticated client to create a session channel, while CVE-2026-86060 allowed control of the privilege mask supplied to the login process, potentially giving an attacker full administrative access without a password, SSH key, or successful authentication. According to the source, the attack chain was used in the wild before patches were released.