<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 08 Sep 2026 04:39:12 +0000</lastBuildDate>
    <item>
      <title>3c9d1cd4-d348-4bf1-9647-a6c82c47919a</title>
      <link>https://vulnerability.circl.lu/sighting/3c9d1cd4-d348-4bf1-9647-a6c82c47919a/export</link>
      <description>{"uuid": "3c9d1cd4-d348-4bf1-9647-a6c82c47919a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-08T00:01:00.702654Z"}</description>
      <content:encoded>{"uuid": "3c9d1cd4-d348-4bf1-9647-a6c82c47919a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-08T00:01:00.702654Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c9d1cd4-d348-4bf1-9647-a6c82c47919a/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:01:00 +0000</pubDate>
    </item>
    <item>
      <title>b15cfa45-0796-4312-bcd7-a2cbc5381149</title>
      <link>https://vulnerability.circl.lu/sighting/b15cfa45-0796-4312-bcd7-a2cbc5381149/export</link>
      <description>{"uuid": "b15cfa45-0796-4312-bcd7-a2cbc5381149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-08T00:00:54.856066Z"}</description>
      <content:encoded>{"uuid": "b15cfa45-0796-4312-bcd7-a2cbc5381149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-08T00:00:54.856066Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b15cfa45-0796-4312-bcd7-a2cbc5381149/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:00:54 +0000</pubDate>
    </item>
    <item>
      <title>4b223ec1-589a-4871-9c44-8cfeb2ec80ab</title>
      <link>https://vulnerability.circl.lu/sighting/4b223ec1-589a-4871-9c44-8cfeb2ec80ab/export</link>
      <description>{"uuid": "4b223ec1-589a-4871-9c44-8cfeb2ec80ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-08T00:00:38.040000Z"}</description>
      <content:encoded>{"uuid": "4b223ec1-589a-4871-9c44-8cfeb2ec80ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-08T00:00:38.040000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4b223ec1-589a-4871-9c44-8cfeb2ec80ab/export</guid>
      <pubDate>Tue, 08 Sep 2026 00:00:38 +0000</pubDate>
    </item>
    <item>
      <title>47db556d-cf14-4048-ac3b-82d0158f44c2</title>
      <link>https://vulnerability.circl.lu/sighting/47db556d-cf14-4048-ac3b-82d0158f44c2/export</link>
      <description>{"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"}</description>
      <content:encoded>{"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/47db556d-cf14-4048-ac3b-82d0158f44c2/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:33:47 +0000</pubDate>
    </item>
    <item>
      <title>242d8439-ce1c-4752-9ec6-eaf4163386e4</title>
      <link>https://vulnerability.circl.lu/sighting/242d8439-ce1c-4752-9ec6-eaf4163386e4/export</link>
      <description>{"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"}</description>
      <content:encoded>{"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/242d8439-ce1c-4752-9ec6-eaf4163386e4/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:33:24 +0000</pubDate>
    </item>
    <item>
      <title>5e65193e-071f-4852-8ba4-518ee29fa142</title>
      <link>https://vulnerability.circl.lu/sighting/5e65193e-071f-4852-8ba4-518ee29fa142/export</link>
      <description>{"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"}</description>
      <content:encoded>{"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5e65193e-071f-4852-8ba4-518ee29fa142/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:00:03 +0000</pubDate>
    </item>
    <item>
      <title>9e217460-1813-4e26-ac7e-5b6f88fee688</title>
      <link>https://vulnerability.circl.lu/sighting/9e217460-1813-4e26-ac7e-5b6f88fee688/export</link>
      <description>{"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"}</description>
      <content:encoded>{"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e217460-1813-4e26-ac7e-5b6f88fee688/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:36:46 +0000</pubDate>
    </item>
    <item>
      <title>d4f1e6ca-8e07-4e99-828e-d9414b714888</title>
      <link>https://vulnerability.circl.lu/sighting/d4f1e6ca-8e07-4e99-828e-d9414b714888/export</link>
      <description>{"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"}</description>
      <content:encoded>{"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d4f1e6ca-8e07-4e99-828e-d9414b714888/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:15:52 +0000</pubDate>
    </item>
    <item>
      <title>1d99a334-7d4e-4c64-a14e-a100666b68cb</title>
      <link>https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export</link>
      <description>{"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"}</description>
      <content:encoded>{"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export</guid>
      <pubDate>Mon, 07 Sep 2026 13:38:41 +0000</pubDate>
    </item>
    <item>
      <title>9b21aecc-2db0-4737-be2e-0ababa036d44</title>
      <link>https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export</link>
      <description>{"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"}</description>
      <content:encoded>{"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export</guid>
      <pubDate>Mon, 07 Sep 2026 09:22:24 +0000</pubDate>
    </item>
  </channel>
</rss>
