{"schema":"vulnpedia.poc/1","cve":"CVE-2026-67279","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-09-25","ransomware":false},"epss":{"score":0.02277,"percentile":0.82988},"cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e6043c151106","executable":false,"sourceId":"e6043c151106","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e6043c151106","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/e6043c151106"}],"repositoryUrl":"https://github.com/gagaltotal/CVE-2026-mikrotik-poc"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fc94df1ef6af","executable":false,"sourceId":"fc94df1ef6af","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fc94df1ef6af","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/fc94df1ef6af"}],"repositoryUrl":"https://github.com/tc4dy/CVE-2026-67279-86060-Toolkit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9879bd678708","executable":false,"sourceId":"9879bd678708","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9879bd678708","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/9879bd678708"}],"repositoryUrl":"https://github.com/HackSpeak/CVE-2026-67279"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/4c8e26e2da1e","executable":false,"sourceId":"4c8e26e2da1e","verification":"catalogued","source":"vulncheck-kev","modified":"2026-09-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4c8e26e2da1e","modified":"2026-09-05T00:00:00Z","url":"https://vulncheck.com/xdb/4c8e26e2da1e"}],"repositoryUrl":"https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC"}],"poc_candidates":[{"url":"https://github.com/HackSpeak/CVE-2026-67279","source":"poc-in-github","sourceId":"CVE-2026-67279","description":"MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing","modified":"2026-10-03T10:06:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67279","url":"https://github.com/HackSpeak/CVE-2026-67279"},{"source":"poc-in-github","sourceId":"CVE-2026-67279","modified":"2026-10-03T10:06:31Z","url":"https://github.com/HackSpeak/CVE-2026-67279"}],"tags":[]},{"url":"https://github.com/tc4dy/CVE-2026-67279-86060-Toolkit","source":"poc-in-github","sourceId":"CVE-2026-67279","description":"CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5/Tor, stealth) & SafeDetect (banner/version audit, IoC guidance, JSON/CSV/HTML). Use Ethically & Safety only.","modified":"2026-10-22T12:20:25Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67279","url":"https://github.com/tc4dy/CVE-2026-67279-86060-Toolkit"},{"source":"poc-in-github","sourceId":"CVE-2026-67279","modified":"2026-10-22T12:20:25Z","url":"https://github.com/tc4dy/CVE-2026-67279-86060-Toolkit"}],"tags":[]},{"url":"https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC","source":"poc-in-github","sourceId":"CVE-2026-67279","description":"Laboratory proof of concept and research notes for CVE-2026-67279 on MikroTik RouterOS 6.42.","modified":"2026-10-08T21:29:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67279","url":"https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC"},{"source":"poc-in-github","sourceId":"CVE-2026-67279","modified":"2026-10-08T21:29:16Z","url":"https://github.com/shmaki4/CVE-2026-67279-Mikrotik-6.42-POC"}],"tags":[]},{"url":"https://github.com/GoldAden/mikrotrick-verifier","source":"poc-in-github","sourceId":"CVE-2026-67279","description":"Non-destructive behavioral verifier for the MikroTik RouterOS SSH auth-bypass (CVE-2026-67279 / MikroTrick). Measures server reaction only — no exploit payload.","modified":"2026-10-17T22:42:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-67279","url":"https://github.com/GoldAden/mikrotrick-verifier"},{"source":"poc-in-github","sourceId":"CVE-2026-67279","modified":"2026-10-17T22:42:18Z","url":"https://github.com/GoldAden/mikrotrick-verifier"}],"tags":[]}],"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-67279/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-67279%22&type=repositories","executable":false}]}