Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication Swati KhandelwalSep 06, 2026Vulnerability / Network Security Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September 5. Successful attacks date to at least September 2. The Hacker News’s September 6 review of the warning found no victim count or attacker identity. MikroTik's security update lists fixed RouterOS releases. CERT says the fixes prevent the observed attacks and recommends immediate installation, followed by a check for unauthorized configuration changes. According to the vendor's default firewall explanation, home MikroTik devices block public access to management ports while their…