CVE-2026-67279

MEDIUM

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of files in the RouterOS managed file namespace, including support files containing configuration and diagnostic data.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Published: 9/5/2026Modified: 9/26/2026

Related Intelligence (1)

HIGHVulnerability

CISA KEV: MikroTik RouterOS — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.

CVE-2026-67279MikroTik RouterOS
CISA KEV

References (9)

https://cert.pl/en/posts/2026/09/mikrotik-routeros-cveThird Party Advisoryhttps://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/MitigationThird Party Advisoryhttps://forum.mikrotik.com/t/6-49-21-long-term-is-released/272802Release Noteshttps://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801Release Noteshttps://forum.mikrotik.com/t/7-24-2-stable-is-released/272800Release Noteshttps://mikrotik.com/supportsec/september-2026-vulnerability/Vendor Advisoryhttps://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/ExploitThird Party Advisoryhttps://bishopfox.com/blog/mikrotrick-inside-the-routeros-takeover-chainThird Party Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-67279US Government Resource