Book a meeting

› 16:52:36 CERT-EU — Critical Vulnerability in F5 BIG-IP APM · › 14:39:41 NCSC-NL CVE-2026-94127 F5 Networks BIG-IP Access Policy Manager · › 14:34:34 NCSC-NL CVE-2026-93952 VeloCloud Orchestrator (VCO) on-premises · › 14:00:00 CERT.PL CVE-2026-67279 MikroTrick: technical analysis, disclosure process, and the use of LL… · › 12:12:03 BSI CVE-2026-94622 vllm: Mehrere Schwachstellen ermöglichen Denial of Service · › 12:12:02 BSI CVE-2026-58504 drawio: Mehrere Schwachstellen · › 12:12:02 BSI CVE-2026-12208 IBM App Connect Enterprise: Schwachstelle ermöglicht Codeausführung · › 12:12:02 BSI — Webmin: Mehrere Schwachstellen · › 12:12:01 BSI CVE-2026-66032 libssh2: Mehrere Schwachstellen · › 12:12:00 BSI CVE-2026-58050 libssh2: Mehrere Schwachstellen · › 12:12:00 BSI CVE-2026-88806 X.Org X11: Schwachstelle ermöglicht Codeausführung · › 12:11:59 BSI CVE-2026-61674 Fluent Bit: Schwachstelle ermöglicht Ausführen von beliebigem Program… ·

← Back to console

Medium CERT.PL · NASK CVE-2026-67279

MikroTrick: technical analysis, disclosure process, and the use of LL…

Published 22 September 2026 at 14:00

Description

We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 vulnerabilities and, when chained, allowed full takeover of a device without authentication. We explain the mechanics of the attacks observed in the wild, the coordinated disclosure of both vulnerabilities, and the practical role of LLM agents in the RouterOS research.