CVE-2026-67279

MikroTik RouterOS is affected by a SSH pre-authentication rekey state bypass (CVE-2026-67279). The root cause is that the SSH service enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated remote client to ope...