Two flaws are being chained against MikroTik routers. Nobody will say which two
2026-09-07Security
CERT Polska warned on 5 September that attackers are taking full administrative control of MikroTik routers over internet-facing SSH, with no authentication, by combining two vulnerabilities. Neither the warning nor the disclosure says which two, or how they combine. Defenders get a version list and one log string.