{"metadata": {"vulnerability": "CVE-2026-67276", "count": 89, "kinds": {"milestone": 5, "sighting": 63, "kev": 9, "other": 12}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-29T11:59:30.538Z", "date_only": false, "value": "2026-07-29T11:59:30.538Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-67276", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67276", "field": "timestamps.asserted_at", "uuid": "4974c0db-04af-472f-a69e-78bc275e7d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2026-67276", "field": "timestamps.first_seen_at", "uuid": "4974c0db-04af-472f-a69e-78bc275e7d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-67276", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2026-67276", "field": "status.status_updated_at", "uuid": "4974c0db-04af-472f-a69e-78bc275e7d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T20:00:55.811Z", "date_only": false, "value": "2026-09-05T20:00:55.811Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67276", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-05T20:17:17Z", "date_only": false, "value": "2026-09-05T20:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J9WG-77FW-F22F", "record": "GHSA-J9WG-77FW-F22F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-05T20:17:17.977Z", "date_only": false, "value": "2026-09-05T20:17:17.977", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67276", "record": "FKIE_CVE-2026-67276", "field": "published"}, {"timestamp": "2026-09-05T20:50:05.127Z", "date_only": false, "value": "2026-09-05T20:50:05.127204Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "a60eb0c8-e91f-4f83-bb5e-f4bdbe8889fa", "content": "CVE-2026-67276 - routeros\nMikrotik RouterOS does not fully verify SSH keys, so someone who knows part of a legitimate key can craft a fake key and gain access as that user. This could let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#routeros #mikrotik #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3muse5sihmx2j"}, {"timestamp": "2026-09-05T21:31:19Z", "date_only": false, "value": "2026-09-05T21:31:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J9WG-77FW-F22F", "record": "GHSA-J9WG-77FW-F22F", "field": "published"}, {"timestamp": "2026-09-05T22:00:01Z", "date_only": false, "value": "2026-09-05T22:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2026-67276", "field": "timestamps.recorded_at", "uuid": "4974c0db-04af-472f-a69e-78bc275e7d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T22:00:02.243Z", "date_only": false, "value": "2026-09-05T22:00:02.243210Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "051e6e71-ab68-458b-bb52-ded6ba62289d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4974c0db-04af-472f-a69e-78bc275e7d1b"}, {"timestamp": "2026-09-05T22:07:07.053Z", "date_only": false, "value": "2026-09-05T22:07:07.053727Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musihjvedt2f", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "e1338c4c-9284-4790-9fc8-daba7650bacf", "content": "\ud83d\udea8 CVE-2026-67276 \u2014 CVSS 9.2 CRITICAL\n\nRouterOS does not compare the complete RSA public key when matching an SSH authentication request to an aut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67276\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3musihjvedt2f"}, {"timestamp": "2026-09-06T08:00:07.615Z", "date_only": false, "value": "2026-09-06T08:00:07.615814Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iJR95E8kv61jfY2vytdD0YiVw2BBATVelGZktxN4BZZcfkCA", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "15ef6991-d0ee-41f0-a949-3a27a35b289e"}, {"timestamp": "2026-09-06T11:00:06.316Z", "date_only": false, "value": "2026-09-06T11:00:06.316194Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Vc2SdgBOuxOFw-ldqM8D03_f1b-HBh3AsCRLq5dgxJuo37SM", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "968b4bf5-7e2d-479e-a435-e7855202bf60"}, {"timestamp": "2026-09-06T11:00:06.548Z", "date_only": false, "value": "2026-09-06T11:00:06.548809Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "205374fd-5957-4b67-acc1-3b4f370dc94d"}, {"timestamp": "2026-09-06T14:00:04.749Z", "date_only": false, "value": "2026-09-06T14:00:04.749241Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101380", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "d4630bb5-b046-419c-aef8-38cc1f367006", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mikrotrick-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 12:19:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101380"}, {"timestamp": "2026-09-06T17:04:26.177Z", "date_only": false, "value": "2026-09-06T17:04:26.177599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "208a0bb6-3c45-4aa2-82ac-3869f7998360", "content": "Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, ...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25"}, {"timestamp": "2026-09-06T17:18:23.571Z", "date_only": false, "value": "2026-09-06T17:18:23.571268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3muuis6udoc2w", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "5684916a-c238-493c-a476-5709867f0b3f", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nMikroTrick: vulnerabilidad cr\u00edtica de omisi\u00f3n de autenticaci\u00f3n SSH en MikroTik RouterOS (CVE-2026-67276)\n\nLeer M\u00e1s / Read More...", "url": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3muuis6udoc2w"}, {"timestamp": "2026-09-06T19:00:45.637Z", "date_only": false, "value": "2026-09-06T19:00:45.637213Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "ef111d41-c0eb-4d33-9750-9307dafe2704", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "url": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita"}, {"timestamp": "2026-09-06T19:09:11.075Z", "date_only": false, "value": "2026-09-06T19:09:11.075940Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/117225668644775403", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "a16f97e1-7b9f-4b0a-88e6-3b7085cf8b5d", "content": "RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc", "url": "https://infosec.exchange/users/obivan/statuses/117225668644775403"}, {"timestamp": "2026-09-06T19:10:33.425Z", "date_only": false, "value": "2026-09-06T19:10:33.425685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3muuozchdtii2", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "d10f62a0-b061-45b9-81a7-e004857f9103", "content": "RouterOS SSH public-key authentication bypass (CVE-2026-67276) https://github.com/dinosn/mikrotrick-poc", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3muuozchdtii2"}, {"timestamp": "2026-09-06T20:45:11.593Z", "date_only": false, "value": "2026-09-06T20:45:11.593840Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.si/si-cert-2026-05", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "d29c4e05-3d60-435d-9cf1-b331c9c9b267", "url": "https://www.cert.si/si-cert-2026-05"}, {"timestamp": "2026-09-06T23:55:01.562Z", "date_only": false, "value": "2026-09-06T23:55:01.562239Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "9b94dc9f-33b9-4788-8707-08d863181d16", "content": "\ud83d\udd34 MikroTrick \u2014 MikroTik routers under active attack\n\nAttackers are exploiting CVE-2026-67276 + CVE-2026-86060 against Internet-exposed RouterOS devices. The chain can bypass normal\n\nstemshop.top/blog/mikroti...\n\n#CVE #CVE202667276 #CVE202686060 #MikroTik #RouterOS #MikroTrick #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226"}, {"timestamp": "2026-09-07T00:00:19.704Z", "date_only": false, "value": "2026-09-07T00:00:19.704314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muv7avpi7a2s", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "f5808a08-2caa-4e5c-9bee-35ee32b4ecd8", "content": "CVE-2026-67276 is trending. Hype score 5, currently #7 on cvemon.\n\nRouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67276", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3muv7avpi7a2s"}, {"timestamp": "2026-09-07T00:40:28.136Z", "date_only": false, "value": "2026-09-07T00:40:28.136538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "fb0bb3c6-d6c3-43e6-b6e2-f8f2c78b7672", "content": "MikroTik Routers Bleed Out While Bureaucrats File the Paperwork\nPANIC 84% | Lag 0.0h | GrayZone says attackers are exploiting CVE-2026-67276 and CVE-2026-86060 against Internet-exposed Ro\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r"}, {"timestamp": "2026-09-07T01:00:11.452Z", "date_only": false, "value": "2026-09-07T01:00:11.452767Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101380", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "f696d9f7-49eb-4841-928c-f2ab2f299869", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mikrotrick-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 12:19:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101380"}, {"timestamp": "2026-09-07T04:00:04.335Z", "date_only": false, "value": "2026-09-07T04:00:04.335409Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b"}, {"timestamp": "2026-09-07T05:01:45.711Z", "date_only": false, "value": "2026-09-07T05:01:45.711595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d"}, {"timestamp": "2026-09-07T07:00:05.117Z", "date_only": false, "value": "2026-09-07T07:00:05.117293Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "url": "https://t.me/P0x3k_1N73LL1G3NC3/431"}, {"timestamp": "2026-09-07T09:22:24.221Z", "date_only": false, "value": "2026-09-07T09:22:24.221904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "record": "cve-2026-67276", "field": "creation_timestamp", "uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "url": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n"}, {"timestamp": "2026-09-07T13:08:00.264Z", "date_only": false, "value": "2026-09-07T13:08:00.264Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-67276", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-07T13:38:41.674Z", "date_only": false, "value": "2026-09-07T13:38:41.674597Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "url": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915"}, {"timestamp": "2026-09-07T16:15:52.303Z", "date_only": false, "value": "2026-09-07T16:15:52.303906Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "url": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja"}, {"timestamp": "2026-09-07T16:36:46.614Z", "date_only": false, "value": "2026-09-07T16:36:46.614638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "url": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g"}, {"timestamp": "2026-09-07T17:00:03.692Z", "date_only": false, "value": "2026-09-07T17:00:03.692156Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "5e65193e-071f-4852-8ba4-518ee29fa142"}, {"timestamp": "2026-09-07T17:33:24.610Z", "date_only": false, "value": "2026-09-07T17:33:24.610115Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125"}, {"timestamp": "2026-09-07T17:33:47.886Z", "date_only": false, "value": "2026-09-07T17:33:47.886354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67276", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67276", "record": "FKIE_CVE-2026-67276", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-08T00:00:38.040Z", "date_only": false, "value": "2026-09-08T00:00:38.040000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "4b223ec1-589a-4871-9c44-8cfeb2ec80ab"}, {"timestamp": "2026-09-08T00:00:54.856Z", "date_only": false, "value": "2026-09-08T00:00:54.856066Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "b15cfa45-0796-4312-bcd7-a2cbc5381149", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "url": "https://t.me/P0x3k_1N73LL1G3NC3/431"}, {"timestamp": "2026-09-08T06:30:15.334Z", "date_only": false, "value": "2026-09-08T06:30:15.334417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3muyfj2v5dj2f", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "6a44bfa6-1e93-4aeb-9971-9e37017b2e7e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-83548: 26 interactions\nCVE-2026-85046: 26 interactions\nCVE-2026-83549: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-67276: 9 interactions\nCVE-2026-85046: 6 interactions\nCVE-2026-83548: 4 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3muyfj2v5dj2f"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-08T11:00:04.794Z", "date_only": false, "value": "2026-09-08T11:00:04.794579Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/LearnExploit/10380", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "db74267f-4e66-4afe-bbe1-4e0613d29e81", "content": "\ud83d\udd25 CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass\n\n\ud83d\udd17 https://github.com/dinosn/mikrotrick-poc", "url": "https://t.me/LearnExploit/10380"}, {"timestamp": "2026-09-08T15:10:35.700Z", "date_only": false, "value": "2026-09-08T15:10:35.700199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muzcliwi7w2n", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "226baa00-20d1-407c-9854-36d8d1591cba", "content": "MikroTik RouterOS with internet-facing SSH is under attack \u2014 CERT Poland's MikroTrick chain (CVE-2026-67276, CVSS 9.2) enables full takeover. Patch to 7.24.2/7.23.4/6.49.21. https://securityweek.com/mikrotik-patches-critical-flaws-chained-to-hack-routers", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muzcliwi7w2n"}, {"timestamp": "2026-09-08T15:23:21.239Z", "date_only": false, "value": "2026-09-08T15:23:21.239561Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117236103864110479", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "3b8e0f1c-1a63-4e3f-9235-ca59afc981f1", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117236103864110479"}, {"timestamp": "2026-09-08T15:23:27.767Z", "date_only": false, "value": "2026-09-08T15:23:27.767983Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3muzdcijhmw2w", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "19a456a4-5cee-46ba-a7e6-99ed0bb30226", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3muzdcijhmw2w"}, {"timestamp": "2026-09-08T16:05:23.020Z", "date_only": false, "value": "2026-09-08T16:05:23.020180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muzfni36ve2i", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "0fb473d4-0f5f-4a70-b0d6-101d35a962d4", "content": "~Cybergcca~\nN-able, MikroTik and Adobe report vulnerabilities exploited in the wild; patch affected systems.\n-\nIOCs: CVE-2026-86218, CVE-2026-67276, CVE-2026-75650\n-\n#CVE #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/cyfar.ca/post/3muzfni36ve2i"}, {"timestamp": "2026-09-08T16:15:08.621Z", "date_only": false, "value": "2026-09-08T16:15:08.621262Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-887", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "7d9d000b-5498-4f3b-9d7a-330e098b4a1d", "url": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-887"}, {"timestamp": "2026-09-08T16:15:55.476Z", "date_only": false, "value": "2026-09-08T16:15:55.476924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3muzgadigum2y", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "d1a147b4-e7a3-414b-afd5-888d59c330a5", "content": "\ud83d\udce1 MikroTrick (CVE-2026-67276 & CVE-2026-86060): MikroTik RouterOS Hijacking Is Already Underway", "url": "https://bsky.app/profile/insomnisec.bsky.social/post/3muzgadigum2y"}, {"timestamp": "2026-09-08T16:33:07.736Z", "date_only": false, "value": "2026-09-08T16:33:07.736531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh73fhac2z", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "0d78e204-1659-4ada-9efd-845e21441190", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-67276: RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checkin\u2026\nCVSS 9.2 \u00b7 EPSS 0.2%\nhttps://beta.vulnsea.com/cve/CVE-2026-67276\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3muzh73fhac2z"}, {"timestamp": "2026-09-09T00:00:31.643Z", "date_only": false, "value": "2026-09-09T00:00:31.643081Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/10380", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "b4036fdb-2d09-40f9-bf05-48dd0cb5288b", "content": "\ud83d\udd25 CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass\n\n\ud83d\udd17 https://github.com/dinosn/mikrotrick-poc", "url": "https://t.me/LearnExploit/10380"}, {"timestamp": "2026-09-09T03:00:05.871Z", "date_only": false, "value": "2026-09-09T03:00:05.871560Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fm0cu64UQMcPSaeZwLrZvUpazNN4JOPZl1NwdO2FrDa-iNyR", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "be2b2295-3a0a-4b8e-955d-7ee8fe075ca1"}, {"timestamp": "2026-09-09T04:26:19.218Z", "date_only": false, "value": "2026-09-09T04:26:19.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-67276", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-09T04:26:19.218Z", "date_only": false, "value": "2026-09-09T04:26:19.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67276", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T05:00:06.648Z", "date_only": false, "value": "2026-09-09T05:00:06.648749Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101487", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "5be0fc14-f0fd-4fa4-9265-91f9b0deb970", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67276\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:36:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101487"}, {"timestamp": "2026-09-09T05:00:07.073Z", "date_only": false, "value": "2026-09-09T05:00:07.073519Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101478", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "45bf757f-10f3-4b54-815a-4be989c54820", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a exploit-mikrotik-2026\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlackHatExploitation\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 06:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101478"}, {"timestamp": "2026-09-09T15:00:03.130Z", "date_only": false, "value": "2026-09-09T15:00:03.130903Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117241675930281550", "record": "cve-2026-67276", "field": "creation_timestamp", "uuid": "b5e5d191-3abe-46d6-8ab1-fb7aebfb9e04", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks#CVE_2026_67276 https://socprime.com/blog/cve-2026-67276-mikrotik-routeros-ssh-zero-day/", "url": "https://infosec.exchange/users/threatcodex/statuses/117241675930281550"}, {"timestamp": "2026-09-09T16:00:07.266Z", "date_only": false, "value": "2026-09-09T16:00:07.266118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101817", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "f2a0db5d-deee-4986-b1c0-303ebfa679cc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Mikrotrick_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4rt-Net\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 12:34:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTesting tool for the Mikrotrick exploit (CVE-2026-67276)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101817"}, {"timestamp": "2026-09-09T20:00:05.787Z", "date_only": false, "value": "2026-09-09T20:00:05.787688Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3025", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "4bfe0dd9-850b-4842-81e4-236d89b8b380", "content": "\ud83d\udd34 Hackers exploit new MikroTik RouterOS flaws to hijack routers\n\nHackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.\n\nOne of the security issues, tracked as CVE-2026-67276, is an SSH authentication bypass flaw in MikroTik RouterOS caused by incomplete validation of RSA public keys.\n\nAn attacker who knows a username and the public modulus of that user\u2019s key can exploit it by crafting a different key and logging in without the legitimate private key.", "url": "https://t.me/pphm_HackerNews/3025"}, {"timestamp": "2026-09-09T23:00:04.735Z", "date_only": false, "value": "2026-09-09T23:00:04.735528Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "8fb328a3-aa97-4489-8a57-b78292788274"}, {"timestamp": "2026-09-10T00:00:08.578Z", "date_only": false, "value": "2026-09-10T00:00:08.578758Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "0900a51e-e5f6-42dc-b889-672df3e0ac62"}, {"timestamp": "2026-09-10T00:00:12.598Z", "date_only": false, "value": "2026-09-10T00:00:12.598716Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3025", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "0d80483f-9fab-4caa-a397-ede0c6cf9e3c", "content": "\ud83d\udd34 Hackers exploit new MikroTik RouterOS flaws to hijack routers\n\nHackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.\n\nOne of the security issues, tracked as CVE-2026-67276, is an SSH authentication bypass flaw in MikroTik RouterOS caused by incomplete validation of RSA public keys.\n\nAn attacker who knows a username and the public modulus of that user\u2019s key can exploit it by crafting a different key and logging in without the legitimate private key.", "url": "https://t.me/pphm_HackerNews/3025"}, {"timestamp": "2026-09-10T00:00:49.475Z", "date_only": false, "value": "2026-09-10T00:00:49.475411Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101478", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "18535fba-52bb-47ee-aa8f-41e92a68ab02", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a exploit-mikrotik-2026\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlackHatExploitation\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 06:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101478"}, {"timestamp": "2026-09-10T00:00:49.751Z", "date_only": false, "value": "2026-09-10T00:00:49.751874Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101487", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "1807552e-143f-4190-8280-b531bf957f6d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67276\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:36:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101487"}, {"timestamp": "2026-09-10T00:00:55.006Z", "date_only": false, "value": "2026-09-10T00:00:55.006022Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fm0cu64UQMcPSaeZwLrZvUpazNN4JOPZl1NwdO2FrDa-iNyR", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "040f1b3e-0e28-479b-8702-cee8698c635f"}, {"timestamp": "2026-09-10T16:25:00Z", "date_only": false, "value": "2026-09-10T16:25:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-67276", "field": "timestamps.asserted_at", "uuid": "a610db47-5a3a-46a5-8676-cb616c68aaf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T16:25:00Z", "date_only": false, "value": "2026-09-10T16:25:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-67276", "field": "evidence.0.details.added_date", "uuid": "a610db47-5a3a-46a5-8676-cb616c68aaf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T16:25:00Z", "date_only": false, "value": "2026-09-10T16:25:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-67276", "field": "timestamps.first_seen_at", "uuid": "a610db47-5a3a-46a5-8676-cb616c68aaf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T16:25:00Z", "date_only": false, "value": "2026-09-10T16:25:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-67276", "field": "status.status_updated_at", "uuid": "a610db47-5a3a-46a5-8676-cb616c68aaf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:15:03.732Z", "date_only": false, "value": "2026-09-11T00:15:03.732061Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-cve-2026-86060", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "7eb88186-1182-424c-84f6-a0a6df19f6ba", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-cve-2026-86060"}, {"timestamp": "2026-09-11T16:02:00.998Z", "date_only": false, "value": "2026-09-11T16:02:00.998945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvawu7byqa2p", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "2b6c88cc-e053-4e42-9b9c-44e637822bc8", "content": "~Cybergcca~\nMikroTik RouterOS flaws are exploited in the wild; CISA added two CVEs to KEV, while four other vendors require updates.\n-\nIOCs: CVE-2026-67277, CVE-2026-86060, CVE-2026-67276\n-\n#CVE #MikroTik #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mvawu7byqa2p"}, {"timestamp": "2026-09-11T17:00:02Z", "date_only": false, "value": "2026-09-11T17:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-67276", "field": "timestamps.recorded_at", "uuid": "a610db47-5a3a-46a5-8676-cb616c68aaf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T17:00:36.875Z", "date_only": false, "value": "2026-09-11T17:00:36.875062Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a610db47-5a3a-46a5-8676-cb616c68aaf9", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "cadb2f03-4220-4103-bad1-eaba7f69f0b9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a610db47-5a3a-46a5-8676-cb616c68aaf9"}, {"timestamp": "2026-09-13T01:00:04.273Z", "date_only": false, "value": "2026-09-13T01:00:04.273415Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sopkacentr/742", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "7fb92f24-64f5-4b31-9255-0a8738c68d92", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "url": "https://t.me/sopkacentr/742"}, {"timestamp": "2026-09-18T12:45:08.244Z", "date_only": false, "value": "2026-09-18T12:45:08.244945Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-mikrotik-routeros-patch-immediately", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "bced7417-5b15-44d2-a1f6-134197df8437", "url": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-mikrotik-routeros-patch-immediately"}, {"timestamp": "2026-09-22T16:45:24.683Z", "date_only": false, "value": "2026-09-22T16:45:24.683611Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "328a26b7-78ac-4e40-8f71-9126c7d2a451", "url": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis"}, {"timestamp": "2026-09-25T14:57:53.150Z", "date_only": false, "value": "2026-09-25T14:57:53.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67276", "record": "FKIE_CVE-2026-67276", "field": "lastModified"}, {"timestamp": "2026-09-25T15:31:25Z", "date_only": false, "value": "2026-09-25T15:31:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J9WG-77FW-F22F", "record": "GHSA-J9WG-77FW-F22F", "field": "modified"}, {"timestamp": "2026-09-25T16:00:06Z", "date_only": false, "value": "2026-09-25T16:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103358", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "02677896-ef89-4b53-8d80-1820959791af", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-mikrotik-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 15:59:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103358"}, {"timestamp": "2026-09-25T16:00:06Z", "date_only": false, "value": "2026-09-25T16:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103358", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "1b6d8fcf-795f-41c6-8928-91e920b14cef", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-mikrotik-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 15:59:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103358"}, {"timestamp": "2026-09-26T03:00:05Z", "date_only": false, "value": "2026-09-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/81ZxAi3drt5TdyCoeDwTgAnR6u7IKZ42DhAcDrRYmOpRijY", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "2ddca0f6-dac3-4f4e-89a9-2d9a2595b0d9"}, {"timestamp": "2026-09-28T06:16:41Z", "date_only": false, "value": "2026-09-28T06:16:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/1049", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "12de446e-939c-4d88-9928-99d625cf2df0", "content": "#cve\n\nCVE-2026-67276\ud83d\udccd\n\nCVE-2026-67276, \u043e\u0434\u043d\u0430 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439,\u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0451\u043d\u043d\u044b\u0445  \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u00abMikroTrick\u00bb. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438\u043c\u044f \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 RouterOS \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d \u0432\u0445\u043e\u0434 \u043f\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 RSA-\u043a\u043b\u044e\u0447\u0443 \u0438 \u043c\u043e\u0434\u0443\u043b\u044c n \u044d\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b 7.0.0\u20137.23.3, 7.24\u20137.24.1 \u0438 6.0.0\u20136.49.20. MikroTik \u0437\u0430\u043a\u0440\u044b\u043b \u0438\u0445 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.25beta3, 7.24.2, 7.23.4 \u0438 6.49.21.\n\n\u0421\u043b\u0435\u0434\u044b \u0430\u0442\u0430\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u0432 \u043b\u043e\u0433\u0430\u0445 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432\u0438\u0434\u0430 login failure for user -2 via ssh \u0438 user  added by ssh:-2@, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f ops \u0438 \u043c\u0435\u0442\u043a\u0443 \u00abFlagged\u00bb \u0432 /system/device-mode/print.\n\n\u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c SSH \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c ( \u0432 \u0442.\u0447. \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c) \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \n\n\ud83d\udccc \u0412 \u044d\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u044f\u0445 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f PoC \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435, \u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0430\u043b\u0438\u0447\u0438\u044f PoC \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0438 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "url": "https://t.me/ap_security/1049"}, {"timestamp": "2026-09-29T06:01:29Z", "date_only": false, "value": "2026-09-29T06:01:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Russian_OSINT/7977", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "0caec245-1947-4991-8e42-75852c23225c", "content": "\ud83d\udce1 \u0413\u0420\u0427\u0426 \u043f\u043e\u0440\u0443\u0447\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c MikroTik \u043d\u0430 \u0444\u043e\u043d\u0435 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 RouterOS\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0420\u0411\u041a, \u043f\u043e\u0434\u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0420\u043e\u0441\u043a\u043e\u043c\u043d\u0430\u0434\u0437\u043e\u0440\u0443 \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 MikroTik \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\n\ud83d\udc46\u041f\u043e\u043b\u044c\u0441\u043a\u0430\u044f CERT Polska \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 RouterOS. \u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-67279 \u0438 CVE-2026-86060, \u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 MikroTrick, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 SSH-\u043a\u043b\u044e\u0447\u0430, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043a\u0430\u043d\u0430\u043b SSH-\u0441\u0435\u0430\u043d\u0441\u0430 \u0431\u0435\u0437 \u0437\u0430\u0432\u0435\u0440\u0448\u0451\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432.\n\n\u0412 CERT \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 SSH. \u0421\u0430\u043c\u044b\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u0442\u0430\u043a \u0434\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f 2 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f. \u0412 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u0442 22 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f CERT Polska \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2026-67276, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0432 MikroTrick, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e.\n\n\u0421 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0435\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u044e\u0430\u043d\u0441. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f RouterOS 6.49.21, 7.23.4 \u0438 7.24.2 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e SSH-\u0446\u0435\u043f\u043e\u0447\u043a\u0443. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-67278, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0432 \u0432\u0435\u0442\u043a\u0435 7.x, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c. \u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CERT Polska \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.23.6 \u0438 7.24.3.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 LTE-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u0435\u0440\u0441\u0438\u0438 7.23.6 \u0438 7.24.3 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043c\u043e\u0434\u0435\u043c\u0430 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438. MikroTik \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 7.23.7 \u0438 7.24.4. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0436\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043c\u043e\u0434\u0435\u043c\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0412 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 CERT \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430 \u2b55\ufe0f GPT-5.5-cyber \u0438 GPT-5.6-sol. \u041e\u043d\u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c RouterOS \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/7977"}, {"timestamp": "2026-09-29T06:01:29Z", "date_only": false, "value": "2026-09-29T06:01:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/7977", "record": "CVE-2026-67276", "field": "creation_timestamp", "uuid": "274fec6b-1afe-4764-84dd-fb3576fe441c", "content": "\ud83d\udce1 \u0413\u0420\u0427\u0426 \u043f\u043e\u0440\u0443\u0447\u0438\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c MikroTik \u043d\u0430 \u0444\u043e\u043d\u0435 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 RouterOS\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0420\u0411\u041a, \u043f\u043e\u0434\u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0420\u043e\u0441\u043a\u043e\u043c\u043d\u0430\u0434\u0437\u043e\u0440\u0443 \u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0440\u0430\u0434\u0438\u043e\u0447\u0430\u0441\u0442\u043e\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 MikroTik \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\n\ud83d\udc46\u041f\u043e\u043b\u044c\u0441\u043a\u0430\u044f CERT Polska \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 RouterOS. \u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-67279 \u0438 CVE-2026-86060, \u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 MikroTrick, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 SSH-\u043a\u043b\u044e\u0447\u0430, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443. \u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043a\u0430\u043d\u0430\u043b SSH-\u0441\u0435\u0430\u043d\u0441\u0430 \u0431\u0435\u0437 \u0437\u0430\u0432\u0435\u0440\u0448\u0451\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0430\u0432.\n\n\u0412 CERT \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 SSH. \u0421\u0430\u043c\u044b\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0430\u0442\u0430\u043a \u0434\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f 2 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f. \u0412 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u043e\u0442 22 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f CERT Polska \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2026-67276, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0432 MikroTrick, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e.\n\n\u0421 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0435\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u044e\u0430\u043d\u0441. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f RouterOS 6.49.21, 7.23.4 \u0438 7.24.2 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e SSH-\u0446\u0435\u043f\u043e\u0447\u043a\u0443. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-67278, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0432 \u0432\u0435\u0442\u043a\u0435 7.x, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c. \u041f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CERT Polska \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 7.23.6 \u0438 7.24.3.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 LTE-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u0435\u0440\u0441\u0438\u0438 7.23.6 \u0438 7.24.3 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043c\u043e\u0434\u0435\u043c\u0430 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438. MikroTik \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 7.23.7 \u0438 7.24.4. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0436\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043c\u043e\u0434\u0435\u043c\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0412 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 CERT \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u044b \u043d\u0430 \u2b55\ufe0f GPT-5.5-cyber \u0438 GPT-5.6-sol. \u041e\u043d\u0438 \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c RouterOS \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044e. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/7977"}]}