CISA has warned that a critical MikroTik RouterOS flaw could let remote attackers execute code with root privileges without logging in. The vulnerability, CVE-2026-84411, could also cause a denial of service through a single specially crafted request. However, the agency says it has no knowledge of active exploitation. Its advisory also contains conflicting version information,…
Hackers are actively exploiting two critical MikroTik RouterOS flaws to take control of internet-exposed routers. The attack chain targets devices that make their SSH services accessible through public networks. Poland’s CERT agency discovered the vulnerabilities with assistance from GPT-5.5-cyber and GPT-5.6-sol. Researchers named the exploit chain “MikroTrick” and confirmed that attackers are already using it…