CISA Adds MikroTik RouterOS Vulnerability CVE-2026-67279 to Actively Exploited Vulnerabilities

CISA added MikroTik RouterOS vulnerability CVE-2026-67279 to the KEV catalog. Administrators are advised to update and restrict SSH access.

CISA added MikroTik RouterOS vulnerability CVE-2026-67279 to the KEV catalog. Administrators are advised to update and restrict SSH access.

CISA added CVE-2026-86060 and CVE-2026-67277 in MikroTik RouterOS to the KEV catalog. MikroTik has released fixed RouterOS versions and recommends restricting SSH access.

CERT Polska has confirmed active attacks against unpatched MikroTik routers with publicly accessible SSH. A chain of flaws allows attackers to gain administrator privileges without standard authentication.