Exploit for Improper Enforcement of Behavioral Workflow in Mikrotik Routeros

🗓️ 27 Sep 2026 12:03:42Reported by tc4dyType

githubexploit🔗 github.com👁 11 Views

Unauthenticated SSH takeover in MikroTik RouterOS via rekey bypass and argument injection.

Reporter	Title	Published	Views	Family All 54
GithubExploit	Exploit for CVE-2026-67276	7 Sep 202606:52	–	githubexploit
GithubExploit	Exploit for CVE-2026-86060	10 Sep 202603:19	–	githubexploit
GithubExploit	Exploit for Improper Enforcement of Behavioral Workflow in Mikrotik Routeros	26 Sep 202603:46	–	githubexploit
GithubExploit	Exploit for CVE-2026-67276	9 Sep 202612:22	–	githubexploit
GithubExploit	Exploit for Argument Injection in Mikrotik Routeros	22 Sep 202613:23	–	githubexploit
GithubExploit	Exploit for CVE-2026-67276	6 Sep 202612:10	–	githubexploit
BDU FSTEC	The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to bypass security restrictions and gain read-only access to data.	7 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to increase their privileges.	7 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSH server of the RouterOS operating system in MikroTik allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-67276	5 Sep 202620:50	–	circl

27 Sep 2026 12:07Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

CVSS 49.2

EPSS0.06451

SSVC

MikroTik RouterOS SSH Pre-Auth Takeover argument-injection state-machine flaw policy mask swap