#MikroTik
All CosmicBytez Labs articles tagged #MikroTik, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-108107: Unauthenticated SQL Injection in PHPNuxBill's radius.php
PHPNuxBill ≤ 2025.3.20 lets unauthenticated attackers extract customer records via blind SQLi in its FreeRADIUS REST endpoint (CVSS 9.8).
- News
CISA Warns of Critical Pre-Auth RCE Flaw in MikroTik RouterOS
CISA warns of CVE-2026-84411, a critical CVSS 9.8 pre-auth flaw in MikroTik RouterOS letting unauthenticated attackers gain root RCE or crash the device.
- News
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
CISA added CVE-2026-65660 (SharePoint RCE, CVSS 8.8) and CVE-2026-67279 (MikroTik RouterOS, CVSS 6.9) to its KEV catalog citing active exploitation.
- Security
CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
An unauthenticated SSH workflow-bypass in MikroTik RouterOS chains with CVE-2026-86060 for full router takeover; CISA added it to KEV on Sept 25.
- Security
CVE-2026-86060: MikroTik RouterOS SSH Privilege Escalation
Unauthenticated attackers can escalate to full admin control on MikroTik RouterOS via a crafted SSH username; CISA lists it as actively exploited.
- Newsletter
Weekly Digest — Issue #34
Adobe rushes an emergency patch as Magento's 'StyleSmuggler' zero-day backdoors stores, an F5 BIG-IP rootkit hides fileless, and JetBrains leaks AWS keys.
- News
Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack, and More
This week's roundup: a sixth Chrome zero-day, mass MikroTik router hijacking, a Coder registry compromise, and N-able's third N-central RCE.
- News
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
CERT Polska warns of active attacks gaining full admin control of internet-facing MikroTik RouterOS devices via SSH with no authentication needed.