https://vulnerability.circl.lu/sightings/feed 2026-09-07T19:45:37.224605+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/47db556d-cf14-4048-ac3b-82d0158f44c2/export 2026-09-07T19:45:37.247406+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"} 2026-09-07T17:33:47.886354+00:00 https://vulnerability.circl.lu/sighting/242d8439-ce1c-4752-9ec6-eaf4163386e4/export 2026-09-07T19:45:37.250632+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"} 2026-09-07T17:33:24.610115+00:00 https://vulnerability.circl.lu/sighting/5e65193e-071f-4852-8ba4-518ee29fa142/export 2026-09-07T19:45:37.250947+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"} 2026-09-07T17:00:03.692156+00:00 https://vulnerability.circl.lu/sighting/9e217460-1813-4e26-ac7e-5b6f88fee688/export 2026-09-07T19:45:37.251068+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"} 2026-09-07T16:36:46.614638+00:00 https://vulnerability.circl.lu/sighting/d4f1e6ca-8e07-4e99-828e-d9414b714888/export 2026-09-07T19:45:37.251174+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"} 2026-09-07T16:15:52.303906+00:00 https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export 2026-09-07T19:45:37.252271+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"} 2026-09-07T13:38:41.674597+00:00 https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export 2026-09-07T19:45:37.252400+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"} 2026-09-07T09:22:24.221904+00:00 https://vulnerability.circl.lu/sighting/ab852345-1e9c-4b8a-96f1-b0be558f1a72/export 2026-09-07T19:45:37.252502+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-07T07:00:05.117293Z"} 2026-09-07T07:00:05.117293+00:00 https://vulnerability.circl.lu/sighting/b9fc95c4-0145-4026-9790-06c896da0203/export 2026-09-07T19:45:37.252600+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "creation_timestamp": "2026-09-07T05:01:45.711595Z"} 2026-09-07T05:01:45.711595+00:00 https://vulnerability.circl.lu/sighting/81361d58-45cf-4c2a-9446-5f0dc6daab8b/export 2026-09-07T19:45:37.252714+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-07T04:00:04.335409Z"} 2026-09-07T04:00:04.335409+00:00