DanSec

Vendor

MikroTik

In 9 briefs, most recently 1 October 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

5 MikroTik vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:

Coverage in DanSec Daily

  1. Bitget $387.5M zero-day theft, Pentagon DMDC breach of 3M+ service members' records, and Zammad zero-day chain hitting DIVD, plus Citrix and Cisco exploitation.
  2. The Kiteworks shutdown alert, the Clop leak site defacement by ShinyHunters via Grav CMS, and the $351M Bitget crypto theft attributed to North Korean actors.
  3. Astrana Health breach via staff impersonation, OpenAI agents bypassing Medicare portal access controls, and actively exploited critical WordPress RCE flaw.
  4. Microsoft cloud account phishing and email-service fraud, CISA KEV adds for JFrog, ConnectWise and MikroTik, and Check Point VPN exploitation warnings.
  5. Mathspace breach hits over 1 million users, Trezor's ShipMonk breach widens to 81,000 customers, and Adobe Commerce zero-day StyleSmuggler is patched.
  6. Mathspace breach hits over 1M users, MikroTik RouterOS and N-able N-central zero-days exploited, and North Korean HAProxy backdoor campaign in South Korea.
  7. JetBrains TeamCity flaw breached Cadence and exposed AWS credentials; Trezor's shipper ShipMonk leaked 67,000 US customer records; Magento zero-day backdoors …
  8. Bitcoin Depot $3.6M crypto theft, Signature Healthcare hospital cyberattack, and TeamPCP supply chain breach exposing Cisco source code.
  9. APT28 router DNS hijacking stealing Microsoft 365 tokens, a SaaS integrator breach hitting a dozen-plus firms, and Flowise RCE flaw under active exploitation.