Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

MikroTik Routers Are Being Hijacked Through A Flaw Patched Days Ago

CERT Polska disclosed six MikroTik RouterOS vulnerabilities on September 5, 2026, including a critical SSH authentication bypass attackers were already exploiting three days earlier. The chain, dubbed MikroTrick, lets attackers seize full control of internet-exposed routers with no valid credentials, and Shodan scans show roughly 300,000 vulnerable devices still online.

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Swati KhandelwalSep 06, 2026Vulnerability / Network Security Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September 5. Successful attacks date to at least September 2. The Hacker News’s September 6 review […] Thank you for subscribing to our R…

Hackers Exploiting MikroTik RouterOS Vulnerability in the Wild to Gain Complete Network Access

Attackers are actively exploiting an unauthenticated remote access flaw in MikroTik RouterOS, and network administrators worldwide are being urged to patch their devices immediately before compromise turns into a full network takeover. MikroTik confirmed on September 3, 2026, that it had discovered a serious security vulnerability affecting RouterOS and had already shipped fixes across every […]

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full… Read more →