{"schema":"vulnpedia.research/1","cve":"CVE-2026-67276","references":[{"url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve","tags":["third-party-advisory","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve"}]},{"url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/","tags":["technical-description","Mitigation","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/"}]},{"url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/","tags":["exploit","Exploit","Third Party Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/"}]},{"url":"https://mikrotik.com/supportsec/september-2026-vulnerability/","tags":["vendor-advisory","Vendor Advisory"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://mikrotik.com/supportsec/september-2026-vulnerability/"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://mikrotik.com/supportsec/september-2026-vulnerability/"}]},{"url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801","tags":["release-notes","Release Notes"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801"}]},{"url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800","tags":["release-notes","Release Notes"],"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","origins":[{"source":"mitre","sourceId":"CERT-PL","modified":"2026-09-07T13:08:00.264Z","url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"},{"source":"nvd","sourceId":"CVE-2026-67276","modified":"2026-09-25T14:57:53.150","url":"https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800"}]},{"source":"euvd","sourceId":"EUVD-2026-72024","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72024","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-72024","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72024"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-72024","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-72024"}]},{"url":"https://www.socdefenders.ai/item/68ceafdc-8b37-4816-acb6-8066b031e965","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://www.socdefenders.ai/item/68ceafdc-8b37-4816-acb6-8066b031e965"}]},{"url":"https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita"}]},{"url":"https://www.linkedin.com/posts/omar-ahmed-le0mx_mikrotik-networksecurity-vulnerability-activity-7502362565193211904-TZgz/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://www.linkedin.com/posts/omar-ahmed-le0mx_mikrotik-networksecurity-vulnerability-activity-7502362565193211904-TZgz/"}]},{"url":"https://cydome.io/maritime-cybersecurity-bulletin-september-11th-2026/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://cydome.io/maritime-cybersecurity-bulletin-september-11th-2026/"}]},{"url":"https://vulncheck.com/xdb/198acb5bb0b5","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"198acb5bb0b5","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"198acb5bb0b5","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/198acb5bb0b5"}]},{"url":"https://github.com/HORKimhab/CVE-2026-67276","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"198acb5bb0b5","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"198acb5bb0b5","modified":"2026-09-05T00:00:00Z","url":"https://github.com/HORKimhab/CVE-2026-67276"}]},{"url":"https://vulncheck.com/xdb/bcce7871500a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"bcce7871500a","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bcce7871500a","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/bcce7871500a"}]},{"url":"https://github.com/dinosn/mikrotrick-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"bcce7871500a","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bcce7871500a","modified":"2026-09-05T00:00:00Z","url":"https://github.com/dinosn/mikrotrick-poc"}]},{"url":"https://vulncheck.com/xdb/03b9f37c1966","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"03b9f37c1966","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"03b9f37c1966","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/03b9f37c1966"}]},{"url":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"03b9f37c1966","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"03b9f37c1966","modified":"2026-09-05T00:00:00Z","url":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026"}]},{"url":"https://vulncheck.com/xdb/a6d3d0e78235","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a6d3d0e78235","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a6d3d0e78235","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/a6d3d0e78235"}]},{"url":"https://github.com/4rt-Net/Mikrotrick_POC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a6d3d0e78235","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a6d3d0e78235","modified":"2026-09-05T00:00:00Z","url":"https://github.com/4rt-Net/Mikrotrick_POC"}]},{"url":"https://vulncheck.com/xdb/1d3caaa6186c","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"1d3caaa6186c","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1d3caaa6186c","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/1d3caaa6186c"}]},{"url":"https://github.com/gagaltotal/CVE-2026-mikrotik-poc","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"1d3caaa6186c","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1d3caaa6186c","modified":"2026-09-05T00:00:00Z","url":"https://github.com/gagaltotal/CVE-2026-mikrotik-poc"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2026-67276","source":"poc-in-github","sourceId":"CVE-2026-67276","description":"CVE-2026-67276 - Draft or TODO","modified":"2026-09-12T06:40:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67276","url":"https://github.com/HORKimhab/CVE-2026-67276"},{"source":"poc-in-github","sourceId":"CVE-2026-67276","modified":"2026-09-12T06:40:39Z","url":"https://github.com/HORKimhab/CVE-2026-67276"}],"tags":[]},{"url":"https://github.com/dinosn/mikrotrick-poc","source":"poc-in-github","sourceId":"CVE-2026-67276","description":"CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC","modified":"2026-10-23T15:04:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67276","url":"https://github.com/dinosn/mikrotrick-poc"},{"source":"poc-in-github","sourceId":"CVE-2026-67276","modified":"2026-10-23T15:04:30Z","url":"https://github.com/dinosn/mikrotrick-poc"}],"tags":[]},{"url":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026","source":"poc-in-github","sourceId":"CVE-2026-67276","description":"CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit","modified":"2026-10-23T15:04:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67276","url":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026"},{"source":"poc-in-github","sourceId":"CVE-2026-67276","modified":"2026-10-23T15:04:01Z","url":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026"}],"tags":[]},{"url":"https://github.com/4rt-Net/Mikrotrick_POC","source":"poc-in-github","sourceId":"CVE-2026-67276","description":"Testing tool for the Mikrotrick exploit (CVE-2026-67276)","modified":"2026-09-30T06:24:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67276","url":"https://github.com/4rt-Net/Mikrotrick_POC"},{"source":"poc-in-github","sourceId":"CVE-2026-67276","modified":"2026-09-30T06:24:18Z","url":"https://github.com/4rt-Net/Mikrotrick_POC"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"198acb5bb0b5","url":"https://vulncheck.com/xdb/198acb5bb0b5","cve":"CVE-2026-67276","dateAdded":"2026-09-06T11:52:37Z","modified":"2026-09-05T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/HORKimhab/CVE-2026-67276","observations":[{"dateAdded":"2026-09-06T11:52:37Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"198acb5bb0b5","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/198acb5bb0b5"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"bcce7871500a","url":"https://vulncheck.com/xdb/bcce7871500a","cve":"CVE-2026-67276","dateAdded":"2026-09-07T07:46:05Z","modified":"2026-09-05T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/dinosn/mikrotrick-poc","observations":[{"dateAdded":"2026-09-07T07:46:05Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"bcce7871500a","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/bcce7871500a"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"03b9f37c1966","url":"https://vulncheck.com/xdb/03b9f37c1966","cve":"CVE-2026-67276","dateAdded":"2026-09-07T07:56:19Z","modified":"2026-09-05T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/BlackHatExploitation/exploit-mikrotik-2026","observations":[{"dateAdded":"2026-09-07T07:56:19Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"03b9f37c1966","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/03b9f37c1966"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a6d3d0e78235","url":"https://vulncheck.com/xdb/a6d3d0e78235","cve":"CVE-2026-67276","dateAdded":"2026-09-09T12:22:54Z","modified":"2026-09-05T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/4rt-Net/Mikrotrick_POC","observations":[{"dateAdded":"2026-09-09T12:22:54Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a6d3d0e78235","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/a6d3d0e78235"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"1d3caaa6186c","url":"https://vulncheck.com/xdb/1d3caaa6186c","cve":"CVE-2026-67276","dateAdded":"2026-09-25T20:09:37Z","modified":"2026-09-05T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/gagaltotal/CVE-2026-mikrotik-poc","observations":[{"dateAdded":"2026-09-25T20:09:37Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"1d3caaa6186c","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/1d3caaa6186c"}]}],"vendorStatements":[],"exploitationSources":[{"source":"euvd","sourceId":"EUVD-2026-72024","catalog":"ENISA EU KEV","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72024","dateAdded":"2026-09-05","origins":[{"source":"euvd","sourceId":"EUVD-2026-72024","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72024"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-09-05T00:00:00Z","modified":"2026-09-05T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"MikroTik","product":"RouterOS","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","catalog":"VulnCheck KEV","kind":"report","url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-72024","dateAdded":"2026-09-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","url":"https://euvd.enisa.europa.eu/enisa/EUVD-2026-72024"},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","url":"https://www.socdefenders.ai/item/68ceafdc-8b37-4816-acb6-8066b031e965"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","catalog":"VulnCheck KEV","kind":"report","url":"https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita","dateAdded":"2026-09-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","url":"https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita"},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","url":"https://www.linkedin.com/posts/omar-ahmed-le0mx_mikrotik-networksecurity-vulnerability-activity-7502362565193211904-TZgz/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","catalog":"VulnCheck KEV","kind":"report","url":"https://cydome.io/maritime-cybersecurity-bulletin-september-11th-2026/","dateAdded":"2026-09-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-67276","url":"https://cydome.io/maritime-cybersecurity-bulletin-september-11th-2026/"}]}]}