https://vulnerability.circl.lu/sightings/feed 2026-09-07T15:40:29.972093+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export 2026-09-07T15:40:29.994715+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"} 2026-09-07T13:38:41.674597+00:00 https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export 2026-09-07T15:40:29.997303+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"} 2026-09-07T09:22:24.221904+00:00 https://vulnerability.circl.lu/sighting/ab852345-1e9c-4b8a-96f1-b0be558f1a72/export 2026-09-07T15:40:29.997574+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-07T07:00:05.117293Z"} 2026-09-07T07:00:05.117293+00:00 https://vulnerability.circl.lu/sighting/b9fc95c4-0145-4026-9790-06c896da0203/export 2026-09-07T15:40:29.997788+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "creation_timestamp": "2026-09-07T05:01:45.711595Z"} 2026-09-07T05:01:45.711595+00:00 https://vulnerability.circl.lu/sighting/81361d58-45cf-4c2a-9446-5f0dc6daab8b/export 2026-09-07T15:40:29.997977+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-07T04:00:04.335409Z"} 2026-09-07T04:00:04.335409+00:00 https://vulnerability.circl.lu/sighting/2aa08544-d5e1-4047-80d5-e5df41d85efa/export 2026-09-07T15:40:29.998160+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2aa08544-d5e1-4047-80d5-e5df41d85efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-07T01:00:32.989230Z"} 2026-09-07T01:00:32.989230+00:00 https://vulnerability.circl.lu/sighting/e6fc63f1-de97-4df2-a63b-03acb7dd5cef/export 2026-09-07T15:40:29.998334+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e6fc63f1-de97-4df2-a63b-03acb7dd5cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/iJR95E8kv61jfY2vytdD0YiVw2BBATVelGZktxN4BZZcfkCA", "content": "", "creation_timestamp": "2026-09-07T01:00:30.399532Z"} 2026-09-07T01:00:30.399532+00:00 https://vulnerability.circl.lu/sighting/ddd4734d-515d-4073-b052-32c12d5e3a2d/export 2026-09-07T15:40:29.998492+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ddd4734d-515d-4073-b052-32c12d5e3a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-07T01:00:18.180467Z"} 2026-09-07T01:00:18.180467+00:00 https://vulnerability.circl.lu/sighting/d85090a2-7730-4151-b1fe-e1a4d981eeea/export 2026-09-07T15:40:29.998651+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d85090a2-7730-4151-b1fe-e1a4d981eeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/Vc2SdgBOuxOFw-ldqM8D03_f1b-HBh3AsCRLq5dgxJuo37SM", "content": "", "creation_timestamp": "2026-09-07T01:00:17.852426Z"} 2026-09-07T01:00:17.852426+00:00 https://vulnerability.circl.lu/sighting/f696d9f7-49eb-4841-928c-f2ab2f299869/export 2026-09-07T15:40:29.998804+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f696d9f7-49eb-4841-928c-f2ab2f299869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101380", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mikrotrick-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 12:19:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-07T01:00:11.452767Z"} 2026-09-07T01:00:11.452767+00:00