{"id":183289,"date":"2026-09-07T22:54:33","date_gmt":"2026-09-07T20:54:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-mikrotik-routeros-dopuskayushhie-udalyonnyj-dostup-po-ssh-bez-autentifikaczii"},"modified":"2026-09-07T22:54:37","modified_gmt":"2026-09-07T20:54:37","slug":"mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","title":{"rendered":"Vulnerabilidades no MikroTik RouterOS que permitem acesso remoto via SSH sem autentica\u00e7\u00e3o.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

No sistema operacional RouterOS, utilizado nos roteadores MikroTik, foram identificadas 6 vulnerabilidades. A combina\u00e7\u00e3o de duas delas permite obter controle total do dispositivo remotamente com direitos administrativos, desde que esteja acess\u00edvel via SSH. Foram registrados casos de explora\u00e7\u00e3o das vulnerabilidades mencionadas. As corre\u00e7\u00f5es da MikroTik est\u00e3o dispon\u00edveis desde 3 de setembro (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) e \u00e9 prov\u00e1vel que os atacantes tenham conseguido entender a natureza das vulnerabilidades atrav\u00e9s dessas corre\u00e7\u00f5es. <\/p>\n

As vulnerabilidades CVE-2026-67276 e CVE-2026-86060 receberam um n\u00edvel cr\u00edtico de severidade (9.2 de 10). O primeiro problema \u00e9 causado pela verifica\u00e7\u00e3o inadequada de chaves p\u00fablicas RSA, utilizadas na autentica\u00e7\u00e3o via SSH. Sabendo o nome de usu\u00e1rio e os par\u00e2metros da chave p\u00fablica do usu\u00e1rio, um invasor pode criar uma chave falsa e se conectar atrav\u00e9s dela via SSH, sem acesso \u00e0 chave privada. O segundo problema est\u00e1 relacionado \u00e0 falta de filtragem de caracteres inv\u00e1lidos no in\u00edcio do nome de usu\u00e1rio ao processar o login via SSH. <\/p>\n

O rastreamento bem-sucedido da explora\u00e7\u00e3o das vulnerabilidades pode ser feito atrav\u00e9s dos registros no log do RouterOS: login failure for user -2 from via ssh user added by ssh:-2@
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0434\u0432\u0443\u0445 \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0438 \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u043e SSH. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0430\u043a\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0430\u0442\u0447\u0438 \u043e\u0442 Mikrotick \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilidades no MikroTik RouterOS que permitem acesso remoto via SSH sem autentica\u00e7\u00e3o | ProHoster","description":"No sistema operacional RouterOS, utilizado nos roteadores MikroTik, foram identificadas 6 vulnerabilidades.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 MikroTik RouterOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-07T20:54:33+00:00","article:modified_time":"2026-09-07T20:54:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183289","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-09-09 10:59:24","updated":"2026-09-09 10:59:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=183289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183289\/revisions"}],"predecessor-version":[{"id":183290,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/183289\/revisions\/183290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=183289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=183289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=183289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}