Keyword

homelab-router

2 dispatches · latest 01 SEP 2026 · all keywords →

01 SEP 2026exploits

Your MikroTik Router Is a Brute-Force Target, and There's No Patch — Yet

CVE-2026-16347 (CVSS 8.8) hits every version of RouterOS: the API auth path has no real rate-limiting, lockout, or source restriction, so admin credentials can be hammered at high volume. CISA published ICSA-26-209-05 with a mitigation checklist that is the whole post.

High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVE-2026-16347

mikrotik routeros brute-force

01 SEP 2026exploits

UniFi Shipped Three Perfect Tens at Once — Patch the OS Before Anything Else

SAB-067 covers 22 vulnerabilities across the entire UniFi line, three of them CVSS 10.0 unauth flaws — including a CRLF auth-bypass on UniFi OS that chains into RCE. Fixes for everything are out; the update order matters.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVE-2026-77537 +9

ubiquiti unifi unifi-os