Mikro Trick Chain Let Attackers Take Over Mikro Tik Routers Without a Password or SSH Key
CERT Polska detailed a two-flaw chain, dubbed MikroTrick, that combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060) to give attackers full administrative control of...