Post by @xrobau@mastodon.au

2026-09-04 04:20 UTC

Please boost for visibility! If you are running a #Mikrotik router or switch, upgrade it now. Right now. The fixed releases are 7.23.4 (long-term), 7.24.2 (stable) and 6.49.21. If you are running a version less than that, there are multiple entrypoints for a complete unauthenticated remote code authentication. This is as bad as it gets, upgrade and reboot now. Yes, you'll have an outage for a few minutes, but it's better than the alternative. #router #ipv4 #ipv6

Replies (6)

@haakon@aus.social 2026-09-04 04:25

@xrobau@mastodon.au right as I’m about to take a week off. Wonderful

Open ##5043481
@djb@social.shirow.net 2026-09-04 05:23

@xrobau@mastodon.au @timixretroplays@digipres.club what are the entry points? Is there a reference you can share?

Open ##5043484
@shlee@aus.social 2026-09-04 05:44

@xrobau@mastodon.au What's the bug? I was hoping to patch next week when I'm physically in Melbourne.

Open ##5043489
@kauer@aus.social 2026-09-04 06:09

@xrobau@mastodon.au Any chance of some reference to the issue - a CVS or something?

Open ##5045534
@freshstart@hachyderm.io 2026-09-04 09:55

@xrobau@mastodon.au what I love about Mikrotik is that you get upgrades for older hardware still.

Open ##5045557
@michael@westergaard.social 2026-09-04 15:51

Easy there tiger. From the release notes: Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information If every update is an emergency, none is. At least include this important bit if sending out alarmist posts.

Open ##5045558