The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a pre-authentication remote code execution (RCE) vulnerability in MikroTik RouterOS. Tracked as CVE-2026-84411, the flaw allows unauthenticated attackers to gain root
Attackers are using a chain of two RouterOS vulnerabilities, known as MikroTrick, to bypass authentication and gain full control over MikroTik routers.
