<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 07 Sep 2026 19:45:37 +0000</lastBuildDate>
    <item>
      <title>47db556d-cf14-4048-ac3b-82d0158f44c2</title>
      <link>https://vulnerability.circl.lu/sighting/47db556d-cf14-4048-ac3b-82d0158f44c2/export</link>
      <description>{"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"}</description>
      <content:encoded>{"uuid": "47db556d-cf14-4048-ac3b-82d0158f44c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mux24ngwoh2q", "content": "\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-07T17:33:47.886354Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/47db556d-cf14-4048-ac3b-82d0158f44c2/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:33:47 +0000</pubDate>
    </item>
    <item>
      <title>242d8439-ce1c-4752-9ec6-eaf4163386e4</title>
      <link>https://vulnerability.circl.lu/sighting/242d8439-ce1c-4752-9ec6-eaf4163386e4/export</link>
      <description>{"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"}</description>
      <content:encoded>{"uuid": "242d8439-ce1c-4752-9ec6-eaf4163386e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117230954181819125", "content": "\ud83d\udcf0 MikroTik Routers Hijacked via 'MikroTrick' Unauthenticated Exploit\n\ud83d\udea8 ACTIVE ATTACK: MikroTik routers are being hijacked via the 'MikroTrick' exploit chain (CVE-2026-67276, CVE-2026-86060). Unauthenticated attackers gain full admin control via exposed SSH. Patch RouterOS NOW. #MikroTik #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/mikrotik-routers-exploited-via-mikrotrick-ssh-exploit-chain/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-07T17:33:24.610115Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/242d8439-ce1c-4752-9ec6-eaf4163386e4/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:33:24 +0000</pubDate>
    </item>
    <item>
      <title>5e65193e-071f-4852-8ba4-518ee29fa142</title>
      <link>https://vulnerability.circl.lu/sighting/5e65193e-071f-4852-8ba4-518ee29fa142/export</link>
      <description>{"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"}</description>
      <content:encoded>{"uuid": "5e65193e-071f-4852-8ba4-518ee29fa142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q", "content": "", "creation_timestamp": "2026-09-07T17:00:03.692156Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5e65193e-071f-4852-8ba4-518ee29fa142/export</guid>
      <pubDate>Mon, 07 Sep 2026 17:00:03 +0000</pubDate>
    </item>
    <item>
      <title>9e217460-1813-4e26-ac7e-5b6f88fee688</title>
      <link>https://vulnerability.circl.lu/sighting/9e217460-1813-4e26-ac7e-5b6f88fee688/export</link>
      <description>{"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"}</description>
      <content:encoded>{"uuid": "9e217460-1813-4e26-ac7e-5b6f88fee688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muwwwos64f2g", "content": "CVE-2026-67276: MikroTik RouterOS SSH Zero\n\n", "creation_timestamp": "2026-09-07T16:36:46.614638Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9e217460-1813-4e26-ac7e-5b6f88fee688/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:36:46 +0000</pubDate>
    </item>
    <item>
      <title>d4f1e6ca-8e07-4e99-828e-d9414b714888</title>
      <link>https://vulnerability.circl.lu/sighting/d4f1e6ca-8e07-4e99-828e-d9414b714888/export</link>
      <description>{"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"}</description>
      <content:encoded>{"uuid": "d4f1e6ca-8e07-4e99-828e-d9414b714888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://www.cert.hr/upozorenj-kriticna-ranjivosti-u-mikrotik-routeros-u-preporucuje-se-hitna-nadogradnja", "content": "", "creation_timestamp": "2026-09-07T16:15:52.303906Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d4f1e6ca-8e07-4e99-828e-d9414b714888/export</guid>
      <pubDate>Mon, 07 Sep 2026 16:15:52 +0000</pubDate>
    </item>
    <item>
      <title>1d99a334-7d4e-4c64-a14e-a100666b68cb</title>
      <link>https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export</link>
      <description>{"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"}</description>
      <content:encoded>{"uuid": "1d99a334-7d4e-4c64-a14e-a100666b68cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.674597Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1d99a334-7d4e-4c64-a14e-a100666b68cb/export</guid>
      <pubDate>Mon, 07 Sep 2026 13:38:41 +0000</pubDate>
    </item>
    <item>
      <title>9b21aecc-2db0-4737-be2e-0ababa036d44</title>
      <link>https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export</link>
      <description>{"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"}</description>
      <content:encoded>{"uuid": "9b21aecc-2db0-4737-be2e-0ababa036d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67276", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3muxa6c2ylc2n", "content": "Monday's fuck-up - this time it's the invincible Mikrotik - github.com/dinosn/mikro... research - cert.pl/en/posts/202... #redteam #mikrotik #cve-2026-67276 #critical #routeros #bypass #ssh #router", "creation_timestamp": "2026-09-07T09:22:24.221904Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b21aecc-2db0-4737-be2e-0ababa036d44/export</guid>
      <pubDate>Mon, 07 Sep 2026 09:22:24 +0000</pubDate>
    </item>
    <item>
      <title>ab852345-1e9c-4b8a-96f1-b0be558f1a72</title>
      <link>https://vulnerability.circl.lu/sighting/ab852345-1e9c-4b8a-96f1-b0be558f1a72/export</link>
      <description>{"uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-07T07:00:05.117293Z"}</description>
      <content:encoded>{"uuid": "ab852345-1e9c-4b8a-96f1-b0be558f1a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/431", "content": "CVE-2026-67276\n\nMikroTik lab PoC \u2014 RouterOS SSH public-key auth bypass", "creation_timestamp": "2026-09-07T07:00:05.117293Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab852345-1e9c-4b8a-96f1-b0be558f1a72/export</guid>
      <pubDate>Mon, 07 Sep 2026 07:00:05 +0000</pubDate>
    </item>
    <item>
      <title>b9fc95c4-0145-4026-9790-06c896da0203</title>
      <link>https://vulnerability.circl.lu/sighting/b9fc95c4-0145-4026-9790-06c896da0203/export</link>
      <description>{"uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "creation_timestamp": "2026-09-07T05:01:45.711595Z"}</description>
      <content:encoded>{"uuid": "b9fc95c4-0145-4026-9790-06c896da0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muvq3vq6ug2d", "content": "Daily IT Security Digest \u2014 2026-09-07\nadministrative control over RouterOS devices. The PoC (Proof of Concept) is publicly disclosed and the chain exploits CVE-2026-67276 (CVSS 10). Thousands of MikroTik routers are estimated to be running vulnerable versions. Organizations should immediately apply", "creation_timestamp": "2026-09-07T05:01:45.711595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b9fc95c4-0145-4026-9790-06c896da0203/export</guid>
      <pubDate>Mon, 07 Sep 2026 05:01:45 +0000</pubDate>
    </item>
    <item>
      <title>81361d58-45cf-4c2a-9446-5f0dc6daab8b</title>
      <link>https://vulnerability.circl.lu/sighting/81361d58-45cf-4c2a-9446-5f0dc6daab8b/export</link>
      <description>{"uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-07T04:00:04.335409Z"}</description>
      <content:encoded>{"uuid": "81361d58-45cf-4c2a-9446-5f0dc6daab8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67276", "type": "published-proof-of-concept", "source": "Telegram/lgDWJ2Z8x0hQFJvErJIEkWoLydLh7Vg_T4dFMiT-ue-b2Vs", "content": "", "creation_timestamp": "2026-09-07T04:00:04.335409Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/81361d58-45cf-4c2a-9446-5f0dc6daab8b/export</guid>
      <pubDate>Mon, 07 Sep 2026 04:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
