{"metadata": {"vulnerability": "CVE-2026-67277", "count": 64, "kinds": {"milestone": 5, "sighting": 31, "kev": 15, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-29T11:59:30.538Z", "date_only": false, "value": "2026-07-29T11:59:30.538Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "status.status_updated_at", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-05T20:17:18Z", "date_only": false, "value": "2026-09-05T20:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6Q2X-6FHJ-R3W8", "record": "GHSA-6Q2X-6FHJ-R3W8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-05T20:17:18.120Z", "date_only": false, "value": "2026-09-05T20:17:18.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67277", "record": "FKIE_CVE-2026-67277", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-05T20:20:30.619Z", "date_only": false, "value": "2026-09-05T20:20:30.619617Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117220286803293141", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "96b559fa-1683-4399-b8e5-abb4cee764b4", "content": "A severe vulnerability was disclosed for Mikrotik RouterOS (CVE-2026-67277) https://vuldb.com/vuln/399363", "url": "https://infosec.exchange/users/vuldb/statuses/117220286803293141"}, {"timestamp": "2026-09-05T20:39:44.166Z", "date_only": false, "value": "2026-09-05T20:39:44.166Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-67277", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-05T21:31:19Z", "date_only": false, "value": "2026-09-05T21:31:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6Q2X-6FHJ-R3W8", "record": "GHSA-6Q2X-6FHJ-R3W8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-05T22:00:01Z", "date_only": false, "value": "2026-09-05T22:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-05T22:00:02.446Z", "date_only": false, "value": "2026-09-05T22:00:02.446343Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "a6d49cfa-0016-417f-8bcc-637fe3ac914d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T11:00:06.413Z", "date_only": false, "value": "2026-09-06T11:00:06.413291Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "cff2d83b-9492-453c-9a9e-e05d9263d736", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T20:45:04.641Z", "date_only": false, "value": "2026-09-06T20:45:04.641484Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "718da266-0551-4e51-8205-bf0cef4528c1", "url": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita"}, {"timestamp": "2026-09-06T20:45:18.274Z", "date_only": false, "value": "2026-09-06T20:45:18.274773Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.si/si-cert-2026-05", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "25b5767b-4fc1-4756-ab3c-b3552e0d3d0c", "url": "https://www.cert.si/si-cert-2026-05"}, {"timestamp": "2026-09-07T13:38:41.730Z", "date_only": false, "value": "2026-09-07T13:38:41.730881Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "1fc2f340-ac63-4fbf-9716-b13a29a13ea9", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "url": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67277", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67277", "record": "FKIE_CVE-2026-67277", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T09:46:33.547Z", "date_only": false, "value": "2026-09-08T09:46:33.547159Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0345", "record": "NCSC-2026-0345", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-08T16:15:10.819Z", "date_only": false, "value": "2026-09-08T16:15:10.819999Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-887", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "7b85912a-a2a9-4a2c-836d-50444b61e763", "url": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-887"}, {"timestamp": "2026-09-08T21:54:53.991Z", "date_only": false, "value": "2026-09-08T21:54:53.991541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muzz6hqvdt2i", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "699ffa75-27e4-43d4-a41f-4984de22dd5f", "content": "CVE-2026-67277 is trending. Hype score 7, currently #7 on cvemon.\n\nRouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-67277", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3muzz6hqvdt2i"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": true, "value": "2026-09-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67277", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": true, "value": "2026-09-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "evidence.0.details.date_added", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "status.status_updated_at", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67277", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-09-10T19:50:56Z", "date_only": false, "value": "2026-09-10T19:50:56+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cca02293-7749-4ac4-9ec4-adceddd4aa0d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:50:56Z", "date_only": false, "value": "2026-09-10T19:50:56+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-67277", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "cca02293-7749-4ac4-9ec4-adceddd4aa0d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:50:56Z", "date_only": false, "value": "2026-09-10T19:50:56+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-67277", "field": "status.status_updated_at", "uuid": "cca02293-7749-4ac4-9ec4-adceddd4aa0d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:50:56.536Z", "date_only": false, "value": "2026-09-10T19:50:56.536Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-67277", "field": "evidence.0.details.added_date", "uuid": "cca02293-7749-4ac4-9ec4-adceddd4aa0d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T20:00:01Z", "date_only": false, "value": "2026-09-10T20:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T20:00:02.077Z", "date_only": false, "value": "2026-09-10T20:00:02.077787Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "98b04683-80f6-4f19-acfd-fc584b91ea5e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T20:13:16.607Z", "date_only": false, "value": "2026-09-10T20:13:16.607750Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv6uglqdsa2k", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "b4693789-9b2d-4ceb-bd3b-52ad80d9bd8f", "content": "\ud83d\uded1 CVE-2026-67277\nMikroTik RouterOS\nCVSS 8.8 / EPSS 0% / KEV: No\nTL;DR: RouterOS accepts a \"related\" btest connection before the corresponding primary session ha\u2026\nhttps://cvesentinel.com/report/CVE-2026-67277?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv6uglqdsa2k"}, {"timestamp": "2026-09-10T21:48:27.432Z", "date_only": false, "value": "2026-09-10T21:48:27.432254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv6zqrlnyp25", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "7e768e95-0d9a-4b56-8e0c-9e2a0303466e", "content": "CISA added two actively exploited MikroTik RouterOS flaws to KEV today, CVE-2026-86060 and CVE-2026-67277, with a 13 September deadline. MikroTik confirms exploitation; fixes landed 3 September in 7.24.2, 7.23.4 and 6.49.21. cisa.gov/news-events/ale...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mv6zqrlnyp25"}, {"timestamp": "2026-09-10T22:39:29.967Z", "date_only": false, "value": "2026-09-10T22:39:29.967777Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mv74m2655s2v", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "1509f802-3760-49c7-9f81-d99a046166c2", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-67277: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-67277", "url": "https://bsky.app/profile/csirts.com/post/3mv74m2655s2v"}, {"timestamp": "2026-09-11T00:00:21.860Z", "date_only": false, "value": "2026-09-11T00:00:21.860617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mv7b4np3oo2i", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "4321b4df-04b7-474e-9c5f-279b50086f59", "content": "Patch XPS EoP CVE-2026-68897 (7.0). CISA KEV adds exploited MikroTik CVE-2026-67277/86060. MotW Zone.Identifier marks downloads. Frozen taskbar: restart Explorer; DISM/SFC. Member: Alt+F4 brightness +7 more stories, 1 reply, 22 new members", "url": "https://bsky.app/profile/windowsforum.com/post/3mv7b4np3oo2i"}, {"timestamp": "2026-09-11T00:15:06.434Z", "date_only": false, "value": "2026-09-11T00:15:06.434973Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-cve-2026-86060", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "c9f15a00-9cdd-4fc5-8e71-d0f0aada5d82", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-020-vulnerabilities-impacting-mikrotik-routeros-cve-2026-67276-cve-2026-67277-cve-2026-86060"}, {"timestamp": "2026-09-11T03:12:29.760Z", "date_only": false, "value": "2026-09-11T03:12:29.760610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv7lu7hno72l", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "0e193342-ca6e-41d0-bebc-4db5df3d0608", "content": "CISA added two actively exploited MikroTik RouterOS bugs (CVE-2026-67277, CVE-2026-86060) to KEV, due 13 Sept. Patch now and take remote admin off the WAN. https://cisa.gov/news-events/alerts/2026/09/10/cisa-adds-two-known-exploited-vulnerabilities-catalog", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv7lu7hno72l"}, {"timestamp": "2026-09-11T03:55:58.675Z", "date_only": false, "value": "2026-09-11T03:55:58.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-11T03:55:58.675Z", "date_only": false, "value": "2026-09-11T03:55:58.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67277", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-11T04:01:53.481Z", "date_only": false, "value": "2026-09-11T04:01:53.481864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv7omjf72l2v", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "5eeed48f-85e5-406c-ad58-5004c89369a9", "content": "~Cisa~\nCISA added two actively exploited MikroTik RouterOS vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2026-67277, CVE-2026-86060\n-\n#CVE-2026-67277 #CVE-2026-86060 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mv7omjf72l2v"}, {"timestamp": "2026-09-11T04:36:14.725Z", "date_only": false, "value": "2026-09-11T04:36:14.725961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv7qjxfsxo2o", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "14ce5d7e-df39-4310-8e07-d778350c4ad9", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 10\uff09\n\nCVE-2026-67277 MikroTik RouterOS\u306b\u304a\u3051\u308b\u91cd\u8981\u6a5f\u80fd\u306e\u8a8d\u8a3c\u6b20\u843d\u306e\u8106\u5f31\u6027\nCVE-2026-86060 MikroTik RouterOS \u30b3\u30de\u30f3\u30c9\u306b\u304a\u3051\u308b\u5f15\u6570\u533a\u5207\u308a\u6587\u5b57\u306e\u4e0d\u9069\u5207\u306a\u7121\u52b9\u5316\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mv7qjxfsxo2o"}, {"timestamp": "2026-09-11T06:30:35.589Z", "date_only": false, "value": "2026-09-11T06:30:35.589621Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwfsojy23", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "d4639ff0-a01d-4580-b10a-8cc4a0b53b18", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-67277: \u26a0\ufe0f CVE-2026-67277: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-67277-routeros-accepts-a-related-btest-connection", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv7wwfsojy23"}, {"timestamp": "2026-09-11T12:52:29.533Z", "date_only": false, "value": "2026-09-11T12:52:29.533", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67277", "record": "FKIE_CVE-2026-67277", "field": "lastModified"}, {"timestamp": "2026-09-11T15:32:27Z", "date_only": false, "value": "2026-09-11T15:32:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6Q2X-6FHJ-R3W8", "record": "GHSA-6Q2X-6FHJ-R3W8", "field": "modified"}, {"timestamp": "2026-09-11T16:02:00.882Z", "date_only": false, "value": "2026-09-11T16:02:00.882112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvawu7byqa2p", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "6c03caeb-ab01-4031-ba8c-2a9c952db682", "content": "~Cybergcca~\nMikroTik RouterOS flaws are exploited in the wild; CISA added two CVEs to KEV, while four other vendors require updates.\n-\nIOCs: CVE-2026-67277, CVE-2026-86060, CVE-2026-67276\n-\n#CVE #MikroTik #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mvawu7byqa2p"}, {"timestamp": "2026-09-11T20:00:02Z", "date_only": false, "value": "2026-09-11T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-67277", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cca02293-7749-4ac4-9ec4-adceddd4aa0d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T20:01:21.875Z", "date_only": false, "value": "2026-09-11T20:01:21.875976Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cca02293-7749-4ac4-9ec4-adceddd4aa0d", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "223f2bda-c0db-4e46-a2a6-973b2385ed80", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cca02293-7749-4ac4-9ec4-adceddd4aa0d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T03:07:08.109Z", "date_only": false, "value": "2026-09-12T03:07:08.109527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvc3zjg6gb2j", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "7f14a1b2-c3a2-4887-ab76-3d182fe94e36", "content": "\ud83d\udccc CVE-2026-67277 - RouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use... https://www.cyberhub.blog/cves/CVE-2026-67277", "url": "https://bsky.app/profile/cyberhub.blog/post/3mvc3zjg6gb2j"}, {"timestamp": "2026-09-13T00:00:00Z", "date_only": true, "value": "2026-09-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-67277", "field": "evidence.0.details.due_date", "uuid": "bb0ee1ae-defa-495f-8b5a-7242b86d5ccb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-13T01:00:04.233Z", "date_only": false, "value": "2026-09-13T01:00:04.233198Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sopkacentr/742", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "a421cad7-2f8c-46ea-ba62-edc66c4b450b", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "url": "https://t.me/sopkacentr/742", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T16:29:12.980Z", "date_only": false, "value": "2026-09-13T16:29:12.980951Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117264675753501005", "record": "cve-2026-67277", "field": "creation_timestamp", "uuid": "2dd9660d-a4fd-4ce4-b26a-c72923fba16b", "content": "We have started reporting out (daily) MikroTik instances with exposed proprietary services, such as WinBox & Bandwidth Test server (btest): https://www.shadowserver.org/what-we-do/network-reporting/accessible-mikrotik-service-report/\nAround 2.6M exposed instances shared daily. Top: Brazil, Indonesia, USA.\nTree map stats: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=mikrotik&source=mikrotik6&data_set=count&scale=log&auto_update=on\nThese should not be publicly accessible on the Internet due to potential vulnerabilities, such as the recent CVE-2026-67277 https://nvd.nist.gov/vuln/detail/cve-2026-67277\nYou can find all our MikroTik detections in Device ID report https://www.shadowserver.org/what-we-do/network-reporting/device-identification-report/ (around 3M daily): https://dashboard.shadowserver.org/statistics/iot-devices/time-series/?date_range=7&vendor=mikrotik&dataset=count&limit=100&group_by=geo&stacking=stacked&auto_update=on\nBackground: https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/", "url": "https://infosec.exchange/users/shadowserver/statuses/117264675753501005"}, {"timestamp": "2026-09-13T16:51:50.657Z", "date_only": false, "value": "2026-09-13T16:51:50.657161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2kzq2fk2b", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "0e17b09f-a6c4-4a14-8c06-c7117e733da7", "content": "These should not be publicly accessible on the Internet due to potential vulnerabilities, like CVE-2026-67277 nvd.nist.gov/vuln/detail/...\n\nYou can find all our MikroTik detections in Device ID report www.shadowserver.org/what-we-do/n... (around 3M daily): dashboard.shadowserver.org/statistics/i...", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2kzq2fk2b"}, {"timestamp": "2026-09-13T16:51:51.125Z", "date_only": false, "value": "2026-09-13T16:51:51.125419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2l3p5wk2b", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "94d43e67-4a95-4bcf-9730-ebce1b6e9e84", "content": "These should not be publicly accessible on the Internet due to potential vulnerabilities, like CVE-2026-67277 nvd.nist.gov/vuln/detail/...\n\nYou can find all our MikroTik detections in Device ID report www.shadowserver.org/what-we-do/n... (around 3M daily): dashboard.shadowserver.org/statistics/i...", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2l3p5wk2b"}, {"timestamp": "2026-09-13T16:51:51.608Z", "date_only": false, "value": "2026-09-13T16:51:51.608874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2l3p5wl2b", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "be458dfa-3121-4c8d-9feb-623762fb4e90", "content": "These should not be publicly accessible on the Internet due to potential vulnerabilities, like CVE-2026-67277 nvd.nist.gov/vuln/detail/...\n\nYou can find all our MikroTik detections in Device ID report www.shadowserver.org/what-we-do/n... (around 3M daily): dashboard.shadowserver.org/statistics/i...", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mvg2l3p5wl2b"}, {"timestamp": "2026-09-18T12:45:11.863Z", "date_only": false, "value": "2026-09-18T12:45:11.863674Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-mikrotik-routeros-patch-immediately", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "4bf89bca-0955-43c6-ad34-e86a32f49f2a", "url": "https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-mikrotik-routeros-patch-immediately"}, {"timestamp": "2026-09-22T16:45:27.065Z", "date_only": false, "value": "2026-09-22T16:45:27.065522Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "d3ab832e-5603-4510-8f28-656dbeb8fc33", "url": "https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis"}, {"timestamp": "2026-09-25T16:04:59.096Z", "date_only": false, "value": "2026-09-25T16:04:59.096927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwe5kg7cwf2j", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "09604f52-fd12-4120-8f93-c59f540e4b0e", "content": "~Cybergcca~\nMikroTik and Microsoft flaws are actively exploited; patch affected systems.\n-\nIOCs: CVE-2026-67277, CVE-2026-86060, CVE-2026-65660\n-\n#CyberSecurity #ThreatIntel #Vulnerabilities", "url": "https://bsky.app/profile/cyfar.ca/post/3mwe5kg7cwf2j"}, {"timestamp": "2026-10-13T13:13:17.516Z", "date_only": false, "value": "2026-10-13T13:13:17.516038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxr4dxtgq224", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "bdb2c1d5-b0f7-4582-94e8-4858c5428242", "content": "\u7c73CISA\u3001MikroTik\u300cRouterOS\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3067\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001MikroTik\u306e\u30eb\u30fc\u30bf\u5411\u3051OS\u300cRouterOS\u300d\u306b\u5224\u660e\u3057\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e749\u670810\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-67277\u300d\u300cCVE-2026-86060\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-86060\u300d\u306f\u3001\u30b3\u30de\u30f3\u30c9\u306e\u5f15\u6570\u533a\u5207\u308a\u6587\u5b57\u3092\u9069\u5207\u306b\u7121\u5bb3\u5316\u3067\u304d\u306a\u3044\u8106\u5f31\u6027\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u3001\u300cSSH\u30bb\u30c3\u30b7\u30e7\u30f3\u300d\u3067\u30ed\u30b0...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxr4dxtgq224"}, {"timestamp": "2026-10-13T13:21:21.884Z", "date_only": false, "value": "2026-10-13T13:21:21.884217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxr4sd6rn224", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "eb352d83-5f79-4064-9f76-65dabf3b944a", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date September 10, 2026\n\nCVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability\nCVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxr4sd6rn224"}], "metrics": {"as_of": "2026-10-28T09:56:20.914Z", "anchors": {"origin": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-13T01:00:04.233Z", "date_only": false, "value": "2026-09-13T01:00:04.233198Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sopkacentr/742", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "a421cad7-2f8c-46ea-ba62-edc66c4b450b", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "url": "https://t.me/sopkacentr/742", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -72056.614, "hours": -20.01572611111111, "days": -0.8339885879629629, "min_seconds": -72056.614, "max_seconds": 14343.386, "approximate": true, "ongoing": false, "order_known": false, "end_before_start": false, "start": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -72056.614, "hours": -20.01572611111111, "days": -0.8339885879629629, "min_seconds": -72056.614, "max_seconds": 14343.386, "approximate": true, "ongoing": false, "order_known": false, "end_before_start": false, "start": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 622747.619, "hours": 172.9854497222222, "days": 7.207727071759258, "min_seconds": 622747.619, "max_seconds": 622747.619, "approximate": false, "ongoing": false, "order_known": true, "end_before_start": false, "start": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-13T01:00:04.233Z", "date_only": false, "value": "2026-09-13T01:00:04.233198Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sopkacentr/742", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "a421cad7-2f8c-46ea-ba62-edc66c4b450b", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "url": "https://t.me/sopkacentr/742", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4542924.300562, "hours": 1261.9234168227777, "days": 52.58014236761574, "min_seconds": 4542924.300562, "max_seconds": 4542924.300562, "approximate": false, "ongoing": true, "order_known": true, "end_before_start": false, "start": {"timestamp": "2026-09-05T20:00:56.614Z", "date_only": false, "value": "2026-09-05T20:00:56.614Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67277", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T09:56:20.914Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 4614980.914562, "hours": 1281.939142933889, "days": 53.414130955578706, "min_seconds": 4528580.914562, "max_seconds": 4614980.914562, "approximate": true, "ongoing": true, "order_known": true, "end_before_start": false, "start": {"timestamp": "2026-09-05T00:00:00Z", "date_only": false, "value": "2026-09-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-67277", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "1d9ea784-c941-41ec-aa5f-c1cb172bcb68", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T09:56:20.914Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 3920176.681562, "hours": 1088.9379671005556, "days": 45.372415295856484, "min_seconds": 3920176.681562, "max_seconds": 3920176.681562, "approximate": false, "ongoing": true, "order_known": true, "end_before_start": false, "start": {"timestamp": "2026-09-13T01:00:04.233Z", "date_only": false, "value": "2026-09-13T01:00:04.233198Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sopkacentr/742", "record": "CVE-2026-67277", "field": "creation_timestamp", "uuid": "a421cad7-2f8c-46ea-ba62-edc66c4b450b", "content": "\u041f\u043e \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043f\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c (\u041d\u041a\u0426\u041a\u0418) \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0CVE-2026-67276,\u00a0CVE-2026-86060,\u00a0CVE-2026-67279,\u00a0CVE-2026-67277,\u00a0CVE-2026-67278,\u00a0CVE-2026-67281, \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\u00a0\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438\u00a0MikroTik\u00a0RouterOS\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u043c.", "url": "https://t.me/sopkacentr/742", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T09:56:20.914Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}