{"id":183289,"date":"2026-09-07T22:54:33","date_gmt":"2026-09-07T20:54:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-mikrotik-routeros-dopuskayushhie-udalyonnyj-dostup-po-ssh-bez-autentifikaczii"},"modified":"2026-09-07T22:54:37","modified_gmt":"2026-09-07T20:54:37","slug":"mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","title":{"rendered":"S\u00e5rbarheter i MikroTik RouterOS som m\u00f6jligg\u00f6r fj\u00e4rr\u00e5tkomst via SSH utan autentisering","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I RouterOS, som anv\u00e4nds i MikroTik-routrar, har sex s\u00e5rbarheter uppt\u00e4ckts. Kombinationen av tv\u00e5 av dem g\u00f6r det m\u00f6jligt att p\u00e5 distans f\u00e5 full kontroll \u00f6ver enheten med administrat\u00f6rsr\u00e4ttigheter, under f\u00f6ruts\u00e4ttning att den \u00e4r tillg\u00e4nglig via SSH. Det har registrerats fall av utnyttjande av de n\u00e4mnda s\u00e5rbarheterna. Patchar fr\u00e5n Mikrotik finns tillg\u00e4ngliga sedan den 3 september (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) och det \u00e4r troligt att angripare har kunnat identifiera s\u00e5rbarheternas natur genom dessa patchar. <\/p>\n

S\u00e5rbarheterna CVE-2026-67276 och CVE-2026-86060 har tilldelats en kritisk riskniv\u00e5 (9,2 av 10). Det f\u00f6rsta problemet orsakas av bristande kontroll av \u00f6ppna RSA-nycklar som anv\u00e4nds vid autentisering via SSH. Om en angripare k\u00e4nner till anv\u00e4ndarnamnet och parametern f\u00f6r anv\u00e4ndarens offentliga nyckel, kan denne skapa en falsk nyckel och ansluta sig via SSH utan att ha tillg\u00e5ng till den privata nyckeln. Det andra problemet \u00e4r kopplat till avsaknaden av filtrering av otill\u00e5tna tecken i b\u00f6rjan av anv\u00e4ndarnamnet vid inloggning via SSH. <\/p>\n

Lyckad utnyttjande av s\u00e5rbarheterna kan sp\u00e5ras genom loggarna i RouterOS: login failure for user -2 from via ssh user added by ssh:-2@
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0434\u0432\u0443\u0445 \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0438 \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u043e SSH. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0430\u043a\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0430\u0442\u0447\u0438 \u043e\u0442 Mikrotick \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 S\u00e5rbarheter i MikroTik RouterOS som m\u00f6jligg\u00f6r fj\u00e4rr\u00e5tkomst via SSH utan autentisering | ProHoster","description":"I RouterOS, som anv\u00e4nds i MikroTik-routrar, har sex s\u00e5rbarheter uppt\u00e4ckts.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 MikroTik RouterOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-07T20:54:33+00:00","article:modified_time":"2026-09-07T20:54:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"183289","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-09-09 10:59:24","updated":"2026-09-09 10:59:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=183289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183289\/revisions"}],"predecessor-version":[{"id":183290,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/183289\/revisions\/183290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=183289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=183289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=183289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}