Exploit for Argument Injection in Mikrotik Routeros

🗓️ 22 Sep 2026 13:23:54Reported by digiprosecType

MikroTrick PoC — CVE-2026-86060 (RouterOS unauthenticated full takeover) poc_mikrotrick.py is a self-contained exploit for the SSH attack chain thatCERT Polska disclosed as "MikroTrick" on 2026-09-05, exploited in the wildsince at least 2026-09-02...

Reporter	Title	Published	Views	Family All 40
GithubExploit	Exploit for CVE-2026-86060	10 Sep 202603:19	–	githubexploit
BDU FSTEC	The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to increase their privileges.	7 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers allows a hacker to disclose sensitive information or cause service failures.	7 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SSH server on the RouterOS operating system of MikroTik allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-67277	5 Sep 202620:20	–	circl
Circl	CVE-2026-67279	5 Sep 202621:53	–	circl
Circl	CVE-2026-86060	5 Sep 202620:50	–	circl
CISA KEV Catalog	MikroTik RouterOS Missing Authentication for Critical Function Vulnerability	10 Sep 202600:00	–	cisa_kev
CISA KEV Catalog	MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability	10 Sep 202600:00	–	cisa_kev
CVE	CVE-2026-67277	5 Sep 202620:00	–	cve

22 Sep 2026 13:47Current

CVSS 3.19.8

CVSS 49.2

EPSS0.01057

SSVC