CVE-2026-67279Vulnerability

1. “CVE-2026-67279”

   Recorded FutureVendor13 Oct 2026
   September 2026 CVE Landscape

2. “CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow”

   Risky Business NewsNews28 Sep 2026
   Risky Bulletin: Intel ends paid bug bounties

3. “CVE-2026-67279”

   CERT-FRGovernment28 Sep 2026
   Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)

4. “CVE-2026-67279 (CVSS score: 6.9) - An improper enforcement of behavioral workflow vulnerability in Mikrotik RouterOS that could allow an unauthenticated client to open a session channel and send an exec request.”

   The Hacker NewsNews26 Sep 2026
   SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

5. “CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability”

   Security AffairsNews25 Sep 2026
   U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

6. “On September 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-67279 to their Known Exploited Vulnerabilities (KEV) Database.”

   Canadian Centre for Cyber SecurityGovernment25 Sep 2026
   Mikrotik security advisory (AV26-887) – Update 2

7. “CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability”

   CISA advisoriesGovernment25 Sep 2026
   CISA Adds Two Known Exploited Vulnerabilities to Catalog

8. “Combined with another vulnerability, CVE-2026-67279, the two flaws could give an attacker full administrative access without a password, SSH key, or successful authentication.”

   Security AffairsNews24 Sep 2026
   AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

9. “The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060).”

   The Hacker NewsNews23 Sep 2026
   MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

10. “Combined with CVE-2026-67279, the vulnerability allowed an attacker to obtain full administrative privileges without knowing a password, possessing an SSH key, or completing authentication.”

    CERT PolskaGovernment22 Sep 2026
    MikroTrick: technical analysis, disclosure process, and the use of LLM agents

11. “CVE-2026-67279”

    CERT PolskaGovernment5 Sep 2026
    Vulnerabilities in Mikrotik RouterOS software

• 82.192.72[.]4in 3 reports
• npratley[.]netin 2 reports

Also named with it: CVE-2026-86060, CVE-2026-65660, CVE-2026-67276, CVE-2026-67277, CVE-2026-87902, CVE-2026-5430, CVE-2026-88771, CVE-2026-93616, CVE-2026-94127, CVE-2026-71362, CVE-2026-93952, CVE-2026-7273, CVE-2026-88772, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880