ssh — PATCH//NOTES

11 SEP 2026exploits

MikroTrick: An LLM Found Six RouterOS Flaws That Chain Into a Free Admin Account — Patch Before Sep 13

CERT Polska disclosed six RouterOS vulnerabilities found with GPT-5.5-cyber; two chain into zero-auth full device takeover when SSH is internet-reachable, both are on KEV with a Sep 13 due date, and the patched build scans your config for signs of compromise.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.2Exploited in the wildKEV due 13 SEP 2026CVE-2026-67276 +5

mikrotik routeros ssh

08 SEP 2026tutorials

SSH the Grown-Up Way: Certificate Auth, No Passwords, Revocable Access

Your servers trust one CA public key instead of a pile of authorized_keys files — and every credential expires on its own. OpenSSH has had this since 5.4; here's how to actually turn it on.

ssh openssh certificate-auth