Hackers Actively Exploiting MikroTik RouterOS MikroTrick Flaws to Take Full Control of Routers

Gbhackers •Divya • September 7, 2026

Threat actors are actively exploiting critical vulnerabilities in MikroTik RouterOS, collectively known as MikroTrick, to compromise internet-exposed routers and gain complete administrative control. The attacks primarily target devices with SSH management access that are exposed to public networks, prompting urgent patching recommendations from MikroTik, CERT Polska, and Latvia’s national CERT.LV. On September 3, MikroTik issued […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MikroTik RouterOS Vulnerabilities Under Active Exploitation CERT Polska has identified six critical vulnerabilities in MikroTik RouterOS, with two of them forming an attack chain named MikroTrick. This chain allows attackers to gain full administrative control of devices via SSH without authentication. The vulnerabilities, including CVE-2026-67276 and CVE-2026-86060, have been actively exploited since September 2, 2026. MikroTik has released patches in versions 7.25beta3, 7.24.2, 7.23.4, and 6.49.21, but devices with exposed SSH services are considered compromised until proven otherwise. Security experts recommend immediate updates and thorough checks of device configurations for unauthorized changes. The attacks have been confirmed to originate from specific IP addresses, and the exploitation is ongoing. Administrators are urged to take immediate action to secure their devices. 19 sources 77

Extracted Entities

Hackers Actively Exploiting MikroTik RouterOS MikroTrick Flaws to Take Full Control of Routers

The full story

Extracted Entities

Domains (1)

Platforms (1)

Vulnerabilities (1)