Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chain

bishopfox.com | vulnerability | CVE-2026-67279 | #authentication-bypass | #network-security | #mikrotik | #routeros | #mikrotrick | #cve-2026-67279 | #cert-polska

Summary

Bishop Fox reproduced the MikroTrick RouterOS takeover chain, using CVE-2026-67279 and a second flaw for unauthenticated admin access on 7.x, and confirmed real devices were already compromised.
CVE
CVE-2026-67279
Published
Collected

original ↗

Related coverage

vulnerability · netspi.com
CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeaways
CVE-2026-20127 is a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller and Manager that lets unauthenticated attackers gain admin access; exploitation is confirmed in the wild.
vulnerability · bishopfox.com
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
Bishop Fox on CVE-2026-82329: a default Artifactory cluster join key anyone can derive, so one forged join request mints an admin token — CVSS 9.8, KEV-listed, fixed in 7.111.21.
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
vulnerability · xbow.com
How XBOW Found a Scoold Authentication Bypass
XBOW's autonomous auth bypass in Scoold, the open-source Q&A platform: unauthenticated attackers could read or modify the instance config and, via HOCON quirks, read arbitrary files on the host.
Critical · vulnerability · crowdfense.com
Flexense SyncBreeze – Unauthenticated Remote Code Execution (0DAY-2025-0002)
This vulnerability coverage helps defenders validate exposure and prioritize remediation.
Critical · vulnerability · github.com
CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation
This is a public pre-auth remote-code-execution PoC, and although offsets are hardcoded for a specific build, it materially lowers the exploitation barrier. NetScaler administrators should upgrade affected builds per the Citrix bulletin and restrict exposed Gateway/AAA surfaces; use the PoC only in explicitly authorized isolated environments.
back