build1 publisher
A prohibited leading character in a RouterOS username rewrites the session's policy mask
Two RouterOS flaws published to NVD on 2026-09-05 both sit in code that runs before a session has proven who it is. An upgrade closes them. Which management services answer from the internet is still an open question.
Publishers:dev.to
Reality
- Evidence55
- Adoption22
- Hype gap+10
- Incentives35
- Confidence55