CVE-2026-67276

Katalog CVE

CVSS 8.1 · High EPSS 6,5%

Kerentanan Improper Verification of Cryptographic Signature pada mikrotik routeros. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target user without the private key.This issue affects only 7.x branch was fixed in versions: 7.23.4 (Long-term) and 7.24.2 (Stable)

Advisory KUTIM-CSIRT

• Peringatan Keamanan: Tiga Kerentanan SSH dan btest MikroTik RouterOS Dieksploitasi Aktif, RouterOS v6 Ikut Terdampak 26 Sep 2026

Rincian

Terbit di NVD

5 September 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-347: Improper Verification of Cryptographic Signature

EPSS (30 hari)

6,5% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mikrotik.com/supportsec/september-2026-vulnerability/ advisory vendor
• https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ mitigasi · advisory pihak ketiga
• https://cert.pl/en/posts/2026/09/mikrotik-routeros-cve advisory pihak ketiga
• https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/ exploit · advisory pihak ketiga
• https://forum.mikrotik.com/t/7-23-4-long-term-is-released/272801 release notes
• https://forum.mikrotik.com/t/7-24-2-stable-is-released/272800 release notes