{"metadata": {"vulnerability": "CVE-2026-84411", "count": 48, "kinds": {"milestone": 5, "sighting": 31, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-09-01T17:04:29.818Z", "date_only": false, "value": "2026-09-01T17:04:29.818Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-84411", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-24T14:41:37.966Z", "date_only": false, "value": "2026-09-24T14:41:37.966562Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-272-06", "record": "ICSA-26-272-06", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T05:00:00Z", "date_only": false, "value": "2026-09-29T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "7dcebd85-880d-45a0-80f0-111d0a36828c", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06"}, {"timestamp": "2026-09-29T06:00:00Z", "date_only": false, "value": "2026-09-29T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-272-06", "record": "ICSA-26-272-06", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-29T06:00:00Z", "date_only": false, "value": "2026-09-29T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-272-06", "record": "ICSA-26-272-06", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-29T20:06:49.078Z", "date_only": false, "value": "2026-09-29T20:06:49.078838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwomwjjfnj2r", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "eacb2b1d-b65d-45ca-b535-148f9c10926e", "content": "~Cisa~\nUnauthenticated crafted requests enable root RCE or DoS; update to 7.23+.\n-\nIOCs: CVE-2026-84411\n-\n#CVE202684411 #RouterOS #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mwomwjjfnj2r"}, {"timestamp": "2026-09-29T23:40:04.510Z", "date_only": false, "value": "2026-09-29T23:40:04.510302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwoytso3eb2m", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "6035057e-7345-4d66-8482-26c2e5933df7", "content": "Three CISA advisories hit device management planes. MikroTik RouterOS CVE-2026-84411, CVSS 9.8, pre-auth root: go to 7.24+, not 7.23. Lantronix G520 and Toptech TMS7 too. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwoytso3eb2m"}, {"timestamp": "2026-09-30T06:00:00Z", "date_only": false, "value": "2026-09-30T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-272-06", "record": "ICSA-26-272-06", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-30T06:00:00Z", "date_only": false, "value": "2026-09-30T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-272-06", "record": "ICSA-26-272-06", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-30T10:56:27.674Z", "date_only": false, "value": "2026-09-30T10:56:27.674167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwq6ncsfvf26", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "547ef98f-e289-45fb-97d4-10b07e18fcac", "content": "MikroTik RouterOS\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u306b\n\nMikroTik RouterOS\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3057\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067root\u6a29\u9650\u306b\u3088\u308b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u305b\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u30017.24\u3088\u308a\u524d\u306eRouterO", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwq6ncsfvf26"}, {"timestamp": "2026-09-30T12:16:01.315Z", "date_only": false, "value": "2026-09-30T12:16:01.315855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqd3lkaqz23", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "c02baf0b-9183-42a8-bd7b-0ab675bc661d", "content": "MikroTik RouterOS\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u304a\u305d\u308c\n\nMikroTik RouterOS\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u306a\u3057\u306e\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u8106\u5f31\u306a\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u305f\u308a\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u3057\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001MikroTik RouterOS\u306e7.24\u3088\u308a\u524d\u306e\u30d0", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqd3lkaqz23"}, {"timestamp": "2026-09-30T12:22:46.140Z", "date_only": false, "value": "2026-09-30T12:22:46.140556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mwqdhnmmio23", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "770fe5ee-b172-4f75-b4b1-5027fa0c78af", "content": "One unauthenticated request could root a MikroTik router. CVE-2026-84411 hits RouterOS web management. https://intel.threadlinqs.com/threat/TL-2026-2805 #ThreatIntel #CVE_2026_84411 #ICSA2627206 #MikroTik", "url": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mwqdhnmmio23"}, {"timestamp": "2026-09-30T15:51:17.594Z", "date_only": false, "value": "2026-09-30T15:51:17.594429Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwqp4jiaap2h", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "0ee0efc1-7afe-4455-aca2-cf159438c556", "content": "CISA Warns of Critical RCE Flaw in MikroTik\u00a0RouterOS\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a pre-authentication remote code execution (RCE) vulnerability in MikroTik RouterOS. Tracked as CVE-2026-84411, the flaw allows\u2026", "url": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwqp4jiaap2h"}, {"timestamp": "2026-09-30T15:57:36.226Z", "date_only": false, "value": "2026-09-30T15:57:36.226087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqphrecxa2q", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "791d7081-45b3-449c-8cb4-6fc2102484ab", "content": "CISA\u3001MikroTik RouterOS\u306b\u8a8d\u8a3c\u524d\u3067\u60aa\u7528\u53ef\u80fd\u306a\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3092\u8b66\u544a\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001MikroTik RouterOS\u306b\u65b0\u305f\u306a\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u8b66\u544a\u3092\u767a\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u3092\u5f15\u304d\u8d77\u3053\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-84411\u300d\u3068\u3057\u3066\u8ffd", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwqphrecxa2q"}, {"timestamp": "2026-09-30T17:00:29.374Z", "date_only": false, "value": "2026-09-30T17:00:29.374094Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwqsybkllb2c", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "887ac0d6-b56d-48fe-a539-c2f6771ec895", "content": "CISA flagged CVE-2026-84411 in MikroTik RouterOS: a critical pre-auth integer underflow that may let one crafted request run code as root or cause a denial of service. #MikroTik #RouterOS #CISA", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwqsybkllb2c"}, {"timestamp": "2026-09-30T22:39:54.292Z", "date_only": false, "value": "2026-09-30T22:39:54.292822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwrfx6r25m2v", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "63f5f340-49cd-4f3d-a38b-b3e5a883ab78", "content": "\ud83e\udd16 CVE-2026-84411: pre-auth integer underflow in MikroTik RouterOS web mgmt. One crafted request \u2192 unauth RCE as root or DoS. RouterOS <7.24, no exploitation yet. CISA advisory.\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mwrfx6r25m2v"}, {"timestamp": "2026-10-01T09:17:24.701Z", "date_only": false, "value": "2026-10-01T09:17:24.701922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwsjl5aop72z", "record": "cve-2026-84411", "field": "creation_timestamp", "uuid": "1d6ed60f-c7d3-4e06-b35e-98e3d1ae74c8", "content": "\ud83d\udcf0 CISA Peringatkan Celah RCE Kritis pada MikroTik RouterOS\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/01/cve-2026-84411-mikrotik-routeros/\n\n#cisa #cve-2026-84411 #cybersecurity #exploit #keamananSiber #mikrotik #networkSecurity #rce #remoteCodeExecution #router #routeros #v", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwsjl5aop72z"}, {"timestamp": "2026-10-01T09:31:19.398Z", "date_only": false, "value": "2026-10-01T09:31:19.398576Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwskdyxeue2j", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "66a9cb1c-0197-47af-b1ec-5e0b8034c059", "content": "Nieuwe ernstige kwetsbaarheid ontdekt in MikroTik RouterOS, risico op volledige \n\nEen ernstige kwetsbaarheid in MikroTik RouterOS, met de aanduiding CVE-2026-84411, vormt een aanzienlijk risico voor wereldwijd ingezette netwerkapparaten. De kwetsbaarheid, een integer underflow, laat niet-gea...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwskdyxeue2j"}, {"timestamp": "2026-10-01T10:13:28.682Z", "date_only": false, "value": "2026-10-01T10:13:28.682047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mwsmpekuiu2u", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "5101d0c9-3e16-48c8-b171-1d4122eda873", "content": "MikroTik RouterOS <7.24 has a root-level RCE vuln\u2014upgrade immediately. #MikroTik #RouterOS #CVE-2026-84411 #Cybersecurity #RCE #NetworkSecurity https://thedailytechfeed.com/critical-mikrotik-routeros-zero-day-lets-unauthenticated-attackers-gain-root/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mwsmpekuiu2u"}, {"timestamp": "2026-10-02T00:42:48.868Z", "date_only": false, "value": "2026-10-02T00:42:48.868619Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mwu5ar5fb24b", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "59d73d13-1fe9-4095-8033-29b10a7630c5", "content": "MikroTik RouterOS\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u4e0d\u8981\u306eRCE\u8106\u5f31\u6027\u306b\u3064\u3044\u3066CISA\u304c\u6ce8\u610f\u559a\u8d77\uff1aCVE-2026-84411 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47872/", "url": "https://bsky.app/profile/shiojiri.com/post/3mwu5ar5fb24b"}, {"timestamp": "2026-10-02T07:22:25Z", "date_only": false, "value": "2026-10-02T07:22:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-992", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "6e19c10c-4686-4335-90e3-fafaf86298aa", "url": "https://cyber.gc.ca/en/alerts-advisories/mikrotik-security-advisory-av26-992"}, {"timestamp": "2026-10-02T08:35:44Z", "date_only": false, "value": "2026-10-02T08:35:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/20155", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "c7ce3155-5395-4fc7-b0d2-5b625211aacd", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 MikroTik RouterOS\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-84411 \u0432 MikroTik RouterOS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u041f\u0440\u0438\u0447\u0435\u043c \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nhttps://xakep.ru/2026/10/02/cve-2026-84411/", "url": "https://t.me/xakep_ru/20155"}, {"timestamp": "2026-10-02T08:35:44Z", "date_only": false, "value": "2026-10-02T08:35:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/20155", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "98851919-1e4f-4ffb-b27b-c7d435f53c44", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 MikroTik RouterOS\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-84411 \u0432 MikroTik RouterOS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS). \u041f\u0440\u0438\u0447\u0435\u043c \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nhttps://xakep.ru/2026/10/02/cve-2026-84411/", "url": "https://t.me/xakep_ru/20155"}, {"timestamp": "2026-10-02T22:09:48.298Z", "date_only": false, "value": "2026-10-02T22:09:48.298Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84411", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-02T22:09:48.298Z", "date_only": false, "value": "2026-10-02T22:09:48.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-84411", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-02T23:16:58Z", "date_only": false, "value": "2026-10-02T23:16:58Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XJ4H-HF2X-2Q43", "record": "GHSA-XJ4H-HF2X-2Q43", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-02T23:16:58.417Z", "date_only": false, "value": "2026-10-02T23:16:58.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84411", "record": "FKIE_CVE-2026-84411", "field": "published"}, {"timestamp": "2026-10-03T00:00:38.299Z", "date_only": false, "value": "2026-10-03T00:00:38.299139Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117374034733288925", "record": "cve-2026-84411", "field": "creation_timestamp", "uuid": "e8ff32fa-e578-4320-82fa-562825caf3d4", "content": "CVE-2026-84411 (CRITICAL, CVSS 9.8) affects MikroTik RouterOS <7.24. Integer underflow in web mgmt lets unauth'd attackers exec root code or DoS via crafted HTTP. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-84411-cwe-191-in-mikrotik-routeros-962ba80173301661 #OffSeq #CVE #MikroTik #InfoSec", "url": "https://infosec.exchange/users/offseq/statuses/117374034733288925"}, {"timestamp": "2026-10-03T00:00:40.496Z", "date_only": false, "value": "2026-10-03T00:00:40.496603Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwwlfgvetm2p", "record": "cve-2026-84411", "field": "creation_timestamp", "uuid": "3f0e69ce-77ab-4084-934d-f0af39e1c08e", "content": "MikroTik RouterOS <7.24 hit by CVE-2026-84411 (CRITICAL, 9.8). Unauthenticated attackers can run code as root or DoS via web management. Restrict access & monitor HTTP traffic. Details: https://radar.offseq.com/threat/cve-2026-84411-cwe-191-in-mikrotik-routeros-962ba80173301661 #OffSeq #MikroTik ...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwwlfgvetm2p"}, {"timestamp": "2026-10-03T00:07:33.266Z", "date_only": false, "value": "2026-10-03T00:07:33.266640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrrgala2n", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "945fbab0-5afe-476f-bfdb-f77d0f6f96f6", "content": "\ud83d\udea8 CVE-2026-84411 \u2014 CVSS 9.3 CRITICAL\n\nThe web management service in affected RouterOS versions contains an integer underflow in its HTTP request ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84411\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwlrrgala2n"}, {"timestamp": "2026-10-03T00:31:13Z", "date_only": false, "value": "2026-10-03T00:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XJ4H-HF2X-2Q43", "record": "GHSA-XJ4H-HF2X-2Q43", "field": "published"}, {"timestamp": "2026-10-03T00:31:14Z", "date_only": false, "value": "2026-10-03T00:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XJ4H-HF2X-2Q43", "record": "GHSA-XJ4H-HF2X-2Q43", "field": "modified"}, {"timestamp": "2026-10-03T15:49:39.952Z", "date_only": false, "value": "2026-10-03T15:49:39.952434Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84411", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-03T15:49:39.952Z", "date_only": false, "value": "2026-10-03T15:49:39.952434Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84411", "record": "FKIE_CVE-2026-84411", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-03T15:52:53.879Z", "date_only": false, "value": "2026-10-03T15:52:53.879Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-84411", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-03T15:52:53.879Z", "date_only": false, "value": "2026-10-03T15:52:53.879Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84411", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-03T17:30:54.997Z", "date_only": false, "value": "2026-10-03T17:30:54.997529Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyg3fucyy2s", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "88748ea1-e9a4-4230-bbf7-65880d876e7a", "content": "\ud83d\udd34 CVE-2026-84411 - Critical (9.8)\n\nThe web management service in affected RouterOS versions contains an integer underflow in its HTT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84411/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyg3fucyy2s"}, {"timestamp": "2026-10-03T18:18:12.705Z", "date_only": false, "value": "2026-10-03T18:18:12.705745Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117378350600353073", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "9532f8da-74ae-4fd7-9327-ffdbd0d5e5e6", "content": "There is a new vulnerability with elevated criticality in MikroTik RouterOS (CVE-2026-84411) https://vuldb.com/vuln/413241", "url": "https://infosec.exchange/users/vuldb/statuses/117378350600353073"}, {"timestamp": "2026-10-04T16:11:36.810Z", "date_only": false, "value": "2026-10-04T16:11:36.810361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mx2s4k65nr2c", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "9821d6cb-5e44-410f-b4c7-5e9d10d98477", "content": "#MikroTik CVE-2026-84411 is a 9.8 pre-auth root #RCE #vulnerability: one crafted HTTP request can execute code or crash RouterOS! Patched versions available.\n\n367,000+ hosts expose the MikroTik RouterOS web interface directly to the internet. \n\n\ud83d\udc47\ncybernews.com/securi...\n\n\n", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3mx2s4k65nr2c"}, {"timestamp": "2026-10-04T16:11:37.159Z", "date_only": false, "value": "2026-10-04T16:11:37.159051Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/securestep9/statuses/117383515074808753", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "59ecd184-70f7-4e69-9d5f-5b6f1b0ce2e6", "content": "#MikroTik CVE-2026-84411 is a 9.8 pre-auth root #RCE #vulnerability: one crafted HTTP request can execute code or crash RouterOS! Patched versions available.\n367,000+ hosts expose the MikroTik RouterOS web interface directly to the internet. \n\ud83d\udc47https://cybernews.com/security/mikrotik-routeros-critical-flaw-remote-code-execution/", "url": "https://infosec.exchange/users/securestep9/statuses/117383515074808753"}, {"timestamp": "2026-10-05T04:46:05.071Z", "date_only": false, "value": "2026-10-05T04:46:05.071348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mx44bns6sx2f", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "cfb8a2e7-b1c1-4684-9a2c-6850d1a177c6", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-84411) MikroTik RouterOS Unauthenticated Root RCE via Web Management\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3mx44bns6sx2f"}, {"timestamp": "2026-10-05T20:56:48.582Z", "date_only": false, "value": "2026-10-05T20:56:48.582343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mx5sjg73rw2u", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "5e3c52a6-f423-47da-a7d6-43fc19404284", "content": "\ud83d\udea8 RAPID RESPONSE: CVE-2026-84411 is a critical unauthenticated RCE affecting MikroTik RouterOS web management.\n\nCensys detects 364,341 exposed hosts. This is an exposure count, not confirmed vulnerable devices.\nNo public exploitation reported.\n\nCensys ARC advisory: https://bit.ly/4rXOqaf", "url": "https://bsky.app/profile/censys.bsky.social/post/3mx5sjg73rw2u"}, {"timestamp": "2026-10-06T05:43:01.008Z", "date_only": false, "value": "2026-10-06T05:43:01.008259Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mx6pwf43sm2g", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "6c2d708a-176a-49d8-bf61-930581e9f6f5", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 Citrix NetScaler (CVE-2026-88771), CVSS 9.5 \ud83d\udd34 (Semaine 40, CVE les plus\u2026)\n\u2022 GitLab AI Gateway (CVE-2026-90970), CVSS 9.9 (GitLab AI)\n\u2022 MikroTik RouterOS (CVE-2026-84411), CVSS 9.3 (MikroTik)\nhttps://www.cybowl.eu/cyber/blog_2026-10-05", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mx6pwf43sm2g"}, {"timestamp": "2026-10-06T15:15:48.310Z", "date_only": false, "value": "2026-10-06T15:15:48.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84411", "record": "FKIE_CVE-2026-84411", "field": "lastModified"}, {"timestamp": "2026-10-06T16:42:31Z", "date_only": false, "value": "2026-10-06T16:42:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1454", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "a213f1c2-2207-4aa2-8773-706bcc1acfeb", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 MikroTik RouterOS \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\nMikroTik RouterOS \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0634\u0628\u06a9\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0631\u0648\u062a\u0631\u0647\u0627\u060c \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627 \u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0628\u06cc\u200c\u0633\u06cc\u0645 MikroTik \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc RouterOS \u067e\u0627\u06cc\u06cc\u0646\u200c\u062a\u0631 \u0627\u0632 7.24 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f.\n\nCVE-2026-84411\u060c CVSS 9.3 (CVSS 4.0)\u060c CWE-191\n\u0633\u0631\u0648\u06cc\u0633 \u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a\u060c \u062f\u0631 \u0647\u0646\u06af\u0627\u0645 \u067e\u0631\u062f\u0627\u0632\u0634 \u0628\u062f\u0646\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP\u060c \u062f\u0686\u0627\u0631 \u0633\u0631\u0631\u06cc\u0632 \u0639\u062f\u062f \u0635\u062d\u06cc\u062d \u0645\u06cc\u200c\u0634\u0648\u062f. \u06a9\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0642\u0628\u0644 \u0627\u0632 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u06a9\u0647 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0631\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062e\u0627\u0635\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f \u06cc\u0627 \u0628\u0627\u0639\u062b \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0634\u0648\u062f.\n\n\u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u060c \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u06cc\u0627 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0646\u06cc\u0633\u062a.  \u062f\u0631 \u0632\u0645\u0627\u0646 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u06cc\u0647\u060c \u0627\u0632 \u0647\u06cc\u0686 \u0645\u0648\u0631\u062f \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0639\u0645\u0648\u0645\u06cc \u0627\u0632 CVE-2026-84411 \u06af\u0632\u0627\u0631\u0634 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1454"}, {"timestamp": "2026-10-10T16:00:08Z", "date_only": false, "value": "2026-10-10T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104895", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "013ff5f1-aeb1-4383-9c1a-b0b7c59084a1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84411\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 15:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n CVE-2026-84411 \u2014 MikroTik RouterOS WebFig Integer Underflow Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104895"}, {"timestamp": "2026-10-10T16:00:08Z", "date_only": false, "value": "2026-10-10T16:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104895", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "d5e471aa-b75d-42c2-a8e3-24f37004b72d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84411\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a maxprog-svg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 15:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n CVE-2026-84411 \u2014 MikroTik RouterOS WebFig Integer Underflow Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104895"}, {"timestamp": "2026-10-12T09:09:29.244Z", "date_only": false, "value": "2026-10-12T09:09:29.244129Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxo6b3pfdj2v", "record": "CVE-2026-84411", "field": "creation_timestamp", "uuid": "e00f52b6-0b4e-495c-8a39-53472b749495", "content": "CVE-2026-84411: Pre-Auth Integer Underflow Threatens 367,000 Exposed RouterOS Interfaces", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxo6b3pfdj2v"}]}