Active Exploitation Advisories

Two chained RouterOS flaws hand admin to an attacker who knows a username and a modulus

CERT Polska reports active exploitation on internet-facing MikroTik routers, where the chain needs no private key and no user interaction, and the fixed builds close the bypass without explaining how attackers learned the account details.