The official Mikrotik router thread

[dabbler]

Updated hAP ac3.

 

[Went_For_Beer]

Just updated my RB3011UiAS

 

[Anthro]

4x RB2011 no issues

 

[killerbyte]

4x RB2011 no issues

The beauty of Mikrotiks... those RB2011s are not exactly new but they still get the latest updates.

 

[Went_For_Beer]

The beauty of Mikrotiks... those RB2011s are not exactly new but they still get the latest updates.

Now if this was an apple device, it would be slowed down with firmware and no new updates

 

[quovadis]

Now if this was an apple device, it would be slowed down with firmware and no new updates

No need to artificially do it, they do slow down all depending on what’s enabled and being used.

 

[Jason-ZA]

Sounds like this is a pretty big/important security update that got released today.

I am running on the long-term branch.

What's new in 7.23.4 (2026-09-03):

This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information.




Edit: After upgrading, my DHCPv6 Client stopped working, it gets stuck in a "Searching...." state, so I am stuck without IPv6 connectivity until that gets fixed, or unless I downgrade.
Others are reporting the same issue on the mikrotik forums.

 

[killerbyte]

Winbox now alerts you that there is an update for the router you are connected to. Maybe I missed it before, but its a pretty cool little feature

 

[Jason-ZA]

Thankfully the DHCPv6 issue was fixed in another urgent release, I have IPv6 connectivity again


What's new in 7.23.5 (2026-09-04):



The 7.23.4 release was an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give you time to update your systems, we are not publishing detailed information yet. This release, 7.23.5, additionally addresses an urgent issue introduced in 7.23.4.



*) dhcp - fixed IPv6 DHCP functionality (introduced in v7.23.4);

 

[rustypup]

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers gain full administrative control of MikroTik routers through internet-exposed SSH without authentication, CERT Polska says.

thehackernews.com

MikroTik reminding us they push insecure garbage... again...

 

[PhireSide]

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

Attackers gain full administrative control of MikroTik routers through internet-exposed SSH without authentication, CERT Polska says.

thehackernews.com

MikroTik reminding us they push insecure garbage... again...

Related: https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/