A New York City homeowner found one of their in-wall Cat6 Ethernet runs had degraded to 100 Mbps despite having 2.5 Gbps-capable switches and access points. Rather than fish a new cable through difficult walls or fall back to a weak wireless mesh setup, they installed a thin 'invisible' fiber optic cable—originally designed for apartment and rental retrofits—using a MikroTik switch, media converters, and bidirectional SC SFP+ transceivers to restore high-speed connectivity between floors.
momandpop.network
· 2026-11-02
CISA has issued an advisory for CVE-2026-84411, a critical integer underflow bug in MikroTik RouterOS's web-management HTTP handling that can be triggered before authentication. A single crafted request could let an unauthenticated attacker execute code as root or crash the device. Versions below 7.24 are affected, and the agency says the vendor advises upgrading to 7.23 or later, though it hasn't published its own advisory yet.
bleepingcomputer.com
· 2026-09-30
CISA has confirmed active exploitation of four vulnerabilities: a maximum-severity JWT authentication bypass in WSO2 API Manager and related products (CVE-2026-5430), a critical Adobe Commerce flaw (CVE-2026-71362), a high-severity SharePoint code injection bug (CVE-2026-65660), and a medium-severity Mikrotik RouterOS SSH bypass (CVE-2026-67279). Federal agencies must patch or mitigate the two critical flaws by September 27. Security firm watchTowr said its honeypots captured forged-token exploitation attempts against WSO2 systems starting September 13.
bleepingcomputer.com
· 2026-09-25
Attackers are combining two newly disclosed MikroTik RouterOS vulnerabilities, an SSH authentication bypass (CVE-2026-67276) and a privilege escalation bug (CVE-2026-86060), to seize full control of routers with SSH exposed to the internet. Poland's CERT, which found the flaws with AI assistance, calls the combined exploit 'MikroTrick' and confirms it is being used in real-world attacks. MikroTik patched the issues in RouterOS versions released September 3, alongside a related bandwidth-test flaw that can leak memory or crash devices.
bleepingcomputer.com
· 2026-09-07
MikroTik simultaneously released RouterOS 7.23.4, 7.24.2 and 6.49.21 on September 3, 2026, each flagging an unspecified 'important security update' without disclosing details. A security researcher reverse-engineered the binary diffs across versions and identified two exploitable flaws: a low-exponent RSA signature forgery leading to an mtget buffer overflow, and an SSH authentication bug where a username value of -2 grants a read-only session elevated privileges, enabling full command execution on the router.
npratley.net
· 2026-09-05
MikroTik has released the CRS804-4DDQ-hRM, a compact desktop switch offering four QSFP56-DD ports for a combined 1.6Tbps of 400GbE bandwidth. It carries a $1,295 list price but typically sells for around $1,100, and the reviewer has been running it in RDMA backends for NVIDIA GB10 and GB300 clusters for months.
servethehome.com
· 2026-09-03
GoKawiil