THREAT OPS › Threat News › [NVD] CVE-2026-67279 — RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling un
[NVD] CVE-2026-67279 — RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling un
CVE-2026-67279 CVSS: None Published: 2026-09-05T20:17:18.390
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of
Indicators of compromise
- CVE-2026-67279cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67279