4 ms·

Pre-auth RCE on MikroTik: exploited before the patch, rebuilt in three hours

• smurda 27d ago
  “Exploitation started three days before the public advisory” I think bug bounty programs are completely overwhelmed right now. Idk how people keep up with them.
  • ecares 27d ago
    They really don't. I was recently approached by a journalist working on a piece on that exact topic.
    • zlokki 26d ago
      Any insights?
  • dns_snek 26d ago
    Mikrotik doesn't have a bug bounty program and their handling of vulnerability reports has always been substandard.