{"vulnerability": "CVE-2026-67276", "sightings": [{"uuid": "a60eb0c8-e91f-4f83-bb5e-f4bdbe8889fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j", "content": "CVE-2026-67276 - routeros\nMikrotik RouterOS does not fully verify SSH keys, so someone who knows part of a legitimate key can craft a fake key and gain access as that user. This could let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#routeros #mikrotik #CVE #infosec", "creation_timestamp": "2026-09-05T20:50:05.127204Z"}, {"uuid": "051e6e71-ab68-458b-bb52-ded6ba62289d", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b", "content": "", "creation_timestamp": "2026-09-05T22:00:02.243210Z"}, {"uuid": "e1338c4c-9284-4790-9fc8-daba7650bacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musihjvedt2f", "content": "\ud83d\udea8 CVE-2026-67276 \u2014 CVSS 9.2 CRITICAL\n\nRouterOS does not compare the complete RSA public key when matching an SSH authentication request to an aut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67276\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T22:07:07.053727Z"}, {"uuid": "15ef6991-d0ee-41f0-a949-3a27a35b289e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/iJR95E8kv61jfY2vytdD0YiVw2BBATVelGZktxN4BZZcfkCA", "content": "", "creation_timestamp": "2026-09-06T08:00:07.615814Z"}, {"uuid": "968b4bf5-7e2d-479e-a435-e7855202bf60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/Vc2SdgBOuxOFw-ldqM8D03_f1b-HBh3AsCRLq5dgxJuo37SM", "content": "", "creation_timestamp": "2026-09-06T11:00:06.316194Z"}, {"uuid": "205374fd-5957-4b67-acc1-3b4f370dc94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-06T11:00:06.548809Z"}, {"uuid": "d4630bb5-b046-419c-aef8-38cc1f367006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/GithubRedTeam/101380", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mikrotrick-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 12:19:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T14:00:04.749241Z"}, {"uuid": "208a0bb6-3c45-4aa2-82ac-3869f7998360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25", "content": "Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, ...\n\nRead full story", "creation_timestamp": "2026-09-06T17:04:26.177599Z"}, {"uuid": "5684916a-c238-493c-a476-5709867f0b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3muuis6udoc2w", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nMikroTrick: vulnerabilidad cr\u00edtica de omisi\u00f3n de autenticaci\u00f3n SSH en MikroTik RouterOS (CVE-2026-67276)\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-09-06T17:18:23.571268Z"}, {"uuid": "ef111d41-c0eb-4d33-9750-9307dafe2704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-06T19:00:45.637213Z"}, {"uuid": "a16f97e1-7b9f-4b0a-88e6-3b7085cf8b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117225668644775403", "content": "RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc", "creation_timestamp": "2026-09-06T19:09:11.075940Z"}, {"uuid": "d10f62a0-b061-45b9-81a7-e004857f9103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3muuozchdtii2", "content": "RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc", "creation_timestamp": "2026-09-06T19:10:33.425685Z"}, {"uuid": "d29c4e05-3d60-435d-9cf1-b331c9c9b267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.si/si-cert-2026-05", "content": "", "creation_timestamp": "2026-09-06T20:45:11.593840Z"}, {"uuid": "9b94dc9f-33b9-4788-8707-08d863181d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226", "content": "\ud83d\udd34 MikroTrick \u2014 MikroTik routers under active attack\n\nAttackers are exploiting CVE-2026-67276 + CVE-2026-86060 against Internet-exposed RouterOS devices. The chain can bypass normal\n\nstemshop.top/blog/mikroti...\n\n#CVE #CVE202667276 #CVE202686060 #MikroTik #RouterOS #MikroTrick #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T23:55:01.562239Z"}, {"uuid": "f5808a08-2caa-4e5c-9bee-35ee32b4ecd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muv7avpi7a2s", "content": "CVE-2026-67276 is trending. Hype score 5, currently #7 on cvemon.\n\nRouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67276", "creation_timestamp": "2026-09-07T00:00:19.704314Z"}, {"uuid": "fb0bb3c6-d6c3-43e6-b6e2-f8f2c78b7672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r", "content": "MikroTik Routers Bleed Out While Bureaucrats File the Paperwork\nPANIC 84% | Lag 0.0h | GrayZone says attackers are exploiting CVE-2026-67276 and CVE-2026-86060 against Internet-exposed Ro\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T00:40:28.136538Z"}, {"uuid": "f696d9f7-49eb-4841-928c-f2ab2f299869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101380", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mikrotrick-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 12:19:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-07T01:00:11.452767Z"}, {"uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-07T04:00:04.335409Z"}, {"uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "creation_timestamp": "2026-09-07T05:01:45.711595Z"}, {"uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-07T07:00:05.117293Z"}, {"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"}, {"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"}, {"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"}, {"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"}, {"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"}, {"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"}, {"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"}, {"uuid": "4b223ec1-589a-4871-9c44-8cfeb2ec80ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-08T00:00:38.040000Z"}, {"uuid": "b15cfa45-0796-4312-bcd7-a2cbc5381149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-08T00:00:54.856066Z"}, {"uuid": "6a44bfa6-1e93-4aeb-9971-9e37017b2e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3muyfj2v5dj2f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-83548: 26 interactions\nCVE-2026-85046: 26 interactions\nCVE-2026-83549: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-67276: 9 interactions\nCVE-2026-85046: 6 interactions\nCVE-2026-83548: 4 interactions\n", "creation_timestamp": "2026-09-08T06:30:15.334417Z"}, {"uuid": "db74267f-4e66-4afe-bbe1-4e0613d29e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/LearnExploit/10380", "content": "\ud83d\udd25 CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass\n\n\ud83d\udd17 https://github.com/dinosn/mikrotrick-poc", "creation_timestamp": "2026-09-08T11:00:04.794579Z"}, {"uuid": "226baa00-20d1-407c-9854-36d8d1591cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muzcliwi7w2n", "content": "MikroTik RouterOS with internet-facing SSH is under attack \u2014 CERT Poland's MikroTrick chain (CVE-2026-67276, CVSS 9.2) enables full takeover. Patch to 7.24.2/7.23.4/6.49.21. https://securityweek.com/mikrotik-patches-critical-flaws-chained-to-hack-routers", "creation_timestamp": "2026-09-08T15:10:35.700199Z"}, {"uuid": "3b8e0f1c-1a63-4e3f-9235-ca59afc981f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117236103864110479", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-08T15:23:21.239561Z"}, {"uuid": "19a456a4-5cee-46ba-a7e6-99ed0bb30226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3muzdcijhmw2w", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-08T15:23:27.767983Z"}, {"uuid": "0fb473d4-0f5f-4a70-b0d6-101d35a962d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muzfni36ve2i", "content": "~Cybergcca~\nN-able, MikroTik and Adobe report vulnerabilities exploited in the wild; patch affected systems.\n-\nIOCs: CVE-2026-86218, CVE-2026-67276, CVE-2026-75650\n-\n#CVE #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-08T16:05:23.020180Z"}, {"uuid": "7d9d000b-5498-4f3b-9d7a-330e098b4a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-887", "content": "", "creation_timestamp": "2026-09-08T16:15:08.621262Z"}, {"uuid": "d1a147b4-e7a3-414b-afd5-888d59c330a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3muzgadigum2y", "content": "\ud83d\udce1 MikroTrick (CVE-2026-67276 & CVE-2026-86060): MikroTik RouterOS Hijacking Is Already Underway", "creation_timestamp": "2026-09-08T16:15:55.476924Z"}, {"uuid": "0d78e204-1659-4ada-9efd-845e21441190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh73fhac2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-67276: RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checkin\u2026\nCVSS 9.2 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-67276\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T16:33:07.736531Z"}, {"uuid": "b4036fdb-2d09-40f9-bf05-48dd0cb5288b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/10380", "content": "\ud83d\udd25 CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass\n\n\ud83d\udd17 https://github.com/dinosn/mikrotrick-poc", "creation_timestamp": "2026-09-09T00:00:31.643081Z"}, {"uuid": "be2b2295-3a0a-4b8e-955d-7ee8fe075ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/fm0cu64UQMcPSaeZwLrZvUpazNN4JOPZl1NwdO2FrDa-iNyR", "content": "", "creation_timestamp": "2026-09-09T03:00:05.871560Z"}, {"uuid": "45bf757f-10f3-4b54-815a-4be989c54820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/GithubRedTeam/101478", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a exploit-mikrotik-2026\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlackHatExploitation\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 06:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.073519Z"}, {"uuid": "5be0fc14-f0fd-4fa4-9265-91f9b0deb970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/GithubRedTeam/101487", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67276\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:36:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:06.648749Z"}, {"uuid": "b5e5d191-3abe-46d6-8ab1-fb7aebfb9e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117241675930281550", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks#CVE_2026_67276 https://socprime.com/blog/cve-2026-67276-mikrotik-routeros-ssh-zero-day/", "creation_timestamp": "2026-09-09T15:00:03.130903Z"}, {"uuid": "f2a0db5d-deee-4986-b1c0-303ebfa679cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101817", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Mikrotrick_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4rt-Net\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 12:34:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTesting tool for the Mikrotrick exploit (CVE-2026-67276)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T16:00:07.266118Z"}, {"uuid": "4bfe0dd9-850b-4842-81e4-236d89b8b380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/pphm_HackerNews/3025", "content": "\ud83d\udd34 Hackers exploit new MikroTik RouterOS flaws to hijack routers\n\nHackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.\n\nOne of the security issues, tracked as CVE-2026-67276, is an SSH authentication bypass flaw in MikroTik RouterOS caused by incomplete validation of RSA public keys.\n\nAn attacker who knows a username and the public modulus of that user\u2019s key can exploit it by crafting a different key and logging in without the legitimate private key.", "creation_timestamp": "2026-09-09T20:00:05.787688Z"}, {"uuid": "8fb328a3-aa97-4489-8a57-b78292788274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "content": "", "creation_timestamp": "2026-09-09T23:00:04.735528Z"}, {"uuid": "0900a51e-e5f6-42dc-b889-672df3e0ac62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "content": "", "creation_timestamp": "2026-09-10T00:00:08.578758Z"}, {"uuid": "0d80483f-9fab-4caa-a397-ede0c6cf9e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3025", "content": "\ud83d\udd34 Hackers exploit new MikroTik RouterOS flaws to hijack routers\n\nHackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.\n\nOne of the security issues, tracked as CVE-2026-67276, is an SSH authentication bypass flaw in MikroTik RouterOS caused by incomplete validation of RSA public keys.\n\nAn attacker who knows a username and the public modulus of that user\u2019s key can exploit it by crafting a different key and logging in without the legitimate private key.", "creation_timestamp": "2026-09-10T00:00:12.598716Z"}, {"uuid": "18535fba-52bb-47ee-aa8f-41e92a68ab02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101478", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a exploit-mikrotik-2026\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlackHatExploitation\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 06:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.475411Z"}, {"uuid": "1807552e-143f-4190-8280-b531bf957f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101487", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67276\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:36:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.751874Z"}, {"uuid": "040f1b3e-0e28-479b-8702-cee8698c635f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/fm0cu64UQMcPSaeZwLrZvUpazNN4JOPZl1NwdO2FrDa-iNyR", "content": "", "creation_timestamp": "2026-09-10T00:00:55.006022Z"}, {"uuid": "7eb88186-1182-424c-84f6-a0a6df19f6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-cve-2026-86060", "content": "", "creation_timestamp": "2026-09-11T00:15:03.732061Z"}, {"uuid": "2b6c88cc-e053-4e42-9b9c-44e637822bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvawu7byqa2p", "content": "~Cybergcca~\nMikroTik RouterOS flaws are exploited in the wild; CISA added two CVEs to KEV, while four other vendors require updates.\n-\nIOCs: CVE-2026-67277, CVE-2026-86060, CVE-2026-67276\n-\n#CVE #MikroTik #ThreatIntel", "creation_timestamp": "2026-09-11T16:02:00.998945Z"}, {"uuid": "cadb2f03-4220-4103-bad1-eaba7f69f0b9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a610db47-5a3a-46a5-8676-cb616c68aaf9", "content": "", "creation_timestamp": "2026-09-11T17:00:36.875062Z"}, {"uuid": "7fb92f24-64f5-4b31-9255-0a8738c68d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/sopkacentr/742", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "creation_timestamp": "2026-09-13T01:00:04.273415Z"}, {"uuid": "bced7417-5b15-44d2-a1f6-134197df8437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-mikrotik-routeros-patch-immediately", "content": "", "creation_timestamp": "2026-09-18T12:45:08.244945Z"}, {"uuid": "328a26b7-78ac-4e40-8f71-9126c7d2a451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis", "content": "", "creation_timestamp": "2026-09-22T16:45:24.683611Z"}, {"uuid": "1b6d8fcf-795f-41c6-8928-91e920b14cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/GithubRedTeam/103358", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-mikrotik-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 15:59:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T16:00:06.000000Z"}, {"uuid": "02677896-ef89-4b53-8d80-1820959791af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103358", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-mikrotik-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 15:59:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-25T16:00:06.000000Z"}, {"uuid": "2ddca0f6-dac3-4f4e-89a9-2d9a2595b0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/81ZxAi3drt5TdyCoeDwTgAnR6u7IKZ42DhAcDrRYmOpRijY", "content": "", "creation_timestamp": "2026-09-26T03:00:05.000000Z"}]}