CVE-2026-67277Vulnerability
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
Reported by 3 independent sources · first reported by CERT Polska · last reported
Last reported 12 days ago
Fix due 13 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 75% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2026-67277”
-
Mikrotik security advisory (AV26-887) – Update 2“Open-source reporting indicates that CVE-2026-67276, CVE-2026-67277 and CVE-2026-86060 related to MikroTik are being exploited in the wild.”
-
MikroTrick: technical analysis, disclosure process, and the use of LLM agents“On 10 September, two vulnerabilities we had discovered, CVE-2026-67277 and CVE-2026-86060, were added to CISA's Known Exploited Vulnerabilities (KEV) Catalog with a three-day remediation deadline.”
-
Vulnerabilities in Mikrotik RouterOS software“CVE-2026-67277”
-
Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended“CVE-2026-67277 - memory disclosure and crash via bandwidth-test (CVSS: 8.8)”
Indicators reported together
named in the same reports- 82.192.72[.]4in 2 reports
Copy this indicator · defanged
Also named with it: CVE-2026-86060, CVE-2026-67276, CVE-2026-67279, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078
Thanks — we review every report.