Hackers Actively Exploit MikroTik RouterOS MikroTrick Flaws to Take Full Control of Routers

Threat actors are actively exploiting critical vulnerabilities in MikroTik RouterOS, collectively known as MikroTrick, to compromise internet-exposed routers and gain complete administrative control.

The attacks primarily target devices with SSH management access exposed to public networks, prompting urgent patching guidance from MikroTik, CERT Polska, and Latvia’s CERT.LV.

MikroTik released security updates on September 3, confirming that fixed RouterOS builds are available through supported update channels. Although the company said most default configurations are not immediately exposed, it urged every administrator to update vulnerable devices without delay.

Hackers Actively Exploit MikroTik RouterOS MikroTrick Flaws

The affected components include the RouterOS SSH server and client, the bandwidth-test service, X.509 certificate handling, and the WebFig web management interface.