Saint MikroTrick, Who Entered Without the Right Key

Patron of MikroTik routers, half-checked SSH keys, and devices exposed on the Internet.

Life

On 5 September 2026 the CVEs for MikroTrick were published: RouterOS flaws reported by CERT Polska, some already exploited in the wild. The sneakiest: when comparing an SSH public key, RouterOS checked the type and the modulus but forgot the exponent, so anyone who knew an authorized key's modulus could forge one and authenticate. Another flaw, triggered by a mangled username, handed over administrator privileges outright.

Prayer

O Saint MikroTrick, who enters with a key that is not yours, let our routers compare the key down to the last bit. Amen.

How to celebrate

Celebrated by upgrading RouterOS to 7.24.3, 7.23.6 or 6.49.21 and restricting SSH to management networks.

A key checked by halves, a door opened in full.