AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)

CVE-2026-67277: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability

infovulnerability🔥 Actively Exploited

security

Source: CISA Known Exploited VulnerabilitiesSeptember 9, 2026CVE-2026-67277

Summary

MikroTik RouterOS has a vulnerability where a critical function lacks proper authentication checks, allowing attackers to read kernel memory (sensitive data stored in a system's core) and cause denial of service (making the system unavailable) through the btest service. This vulnerability is currently being actively exploited by attackers in real-world attacks.

Solution / Mitigation

Apply mitigations according to vendor instructions at https://mikrotik.com/supportsec/september-2026-vulnerability/, following CISA's BOD 26-04 guidance for prioritizing security updates. If mitigations are unavailable, discontinue use of the product. Patching is due by 2026-09-13.

Vulnerability Details

EPSS (30-day exploit probability)

EPSS: 0.4%

Patch Available

Yes

Exploit Maturity

🔥 Actively Exploited

Disclosure Date

September 9, 2026

Classification

Attack SophisticationModerate

Taxonomy References

CWE (Weakness Type)

CWE-306

CAPEC (Attack Pattern)

CAPEC-115

Monthly digest — independent AI security research

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67277

First tracked: September 10, 2026 at 08:01 PM

Classified by LLM (prompt v3) · confidence: 95%