Two Critical RouterOS Flaws Enable Privilege Escalation on MikroTik Edge Routers

·1 views

Two vulnerabilities affecting MikroTik RouterOS were published to the National Vulnerability Database on September 5, 2026. The more severe flaw, CVE-2026-86060, carries a CVSS score of 9.8 and exploits a parsing error in the SSH login path, allowing attackers to alter the device's authorization policy and escalate privileges. Because RouterOS devices typically serve as internet-boundary hardware managing routing, firewalls, and VPN termination, a successful compromise grants control over an entire network perimeter. ZoomEye data identifies over 8 million assets with a RouterOS fingerprint, though this reflects the broader installed base rather than the specific count of vulnerable, internet-exposed devices. MikroTik advises operators to upgrade to a patched release on their respective stable or long-term maintenance branch, with exact version details available through the official vendor advisory.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Experiment Reveals Hidden Latency After AI Code Generation Ends

A developer found that the real performance bottleneck in an AI-assisted coding workflow was not the remote language model but the file-writing steps that followed token generation. Standard product dashboards typically highlight first-token latency, masking heavier stalls that occur during the apply phase. To investigate, the developer built a lightweight Python timer using perf_counter to record named spans and render them as an ASCII waterfall chart. The experiment used a small local JSON fixture with no production traffic, deliberately keeping the setup simple and reproducible. The findings showed that apply-phase operations like writing and fsyncing files produced multiple distinct spans, collectively outweighing the generation span in wall-clock time.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study Finds Half of 330 AI Models Fail to Respond Correctly in Korean

A benchmark evaluation of 330 large language models tested Korean language ability across seven axes, including honorifics, terminology, register, and format compliance. A script-based script-contamination check — not an AI judge — automatically failed any response containing less than 25% Hangul, more than three Chinese characters, or any Japanese kana. Using this method, 766 of 2,304 responses (33.2%) were auto-failed before human or AI review, and 54 models failed all seven tasks entirely. Honorifics and knowledge of Korean institutions proved the hardest axes, with AI success rates of just 8.5% and 9.4% respectively. Among vendors with at least eight models tested, Anthropic led with a mean score of 2.29 out of 3, while five models — mostly from OpenAI — achieved a perfect score.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Faster Software Development Means Little If Users Still Struggle to Navigate It

Modern tools like agile workflows, component libraries, cloud platforms, and AI-assisted coding have dramatically reduced the time it takes to build software. However, writer Parvej Shah argues that development speed and product usability are fundamentally different metrics, and shipping features quickly does not guarantee those features are easy to use. Shah contends that the true advantage of rapid development lies not in building more features faster, but in shortening the feedback loop — testing assumptions with real users sooner and iterating based on what is observed. While engineering teams measure progress through deployments and passing tests, users only care whether a product helps them accomplish their goal. As competitors also accelerate their development pace, Shah suggests the real strategic question is not how to build faster, but how to use that speed more wisely.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

React Router Data Mode Explained: How v6 Upgraded Single Page App Management

React Router offers three progressive modes — Declarative, Data, and Framework — each adding more features at the cost of architectural control. Declarative Mode handles basic URL-to-component matching using APIs like useNavigate and useLocation, while Data Mode, introduced in React Router v6, moves route configuration outside React rendering to enable data loading, actions, and pending states. Data Mode uses APIs such as loader, action, and useFetcher, giving developers more hands-on control including parallel data loading. Framework Mode builds further on Data Mode by integrating a Vite plugin to support type-safe routing, intelligent code splitting, and SSR or static rendering strategies. This article series focuses primarily on Data Mode, aiming to provide a deep-dive into its capabilities and practical usage.

0 comments Read more at DEV Community