EUVD-2026-72027

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

CVE-2026-67279

MikroTik RouterOS is affected by a SSH pre-authentication rekey state bypass (CVE-2026-67279). The root cause is that the SSH service enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated remote client to ope...

PT-2026-86454

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 RouterOS versions prior to 7.23.4 RouterOS versions prior to 7.24.2 Description An issue exists where the SSH server enters the connection protocol following a client-requested rekey without requiring user...