The dojo blog.
Vulnerabilities explained with the commands to protect yourself, RouterOS updates to know before installing them, news and products — in English, from official sources.
New SFP modules and hot-swap power supplies for MikroTik
MikroTik has updated its range of optical modules and backup power supplies. The new additions include two new SFP modules for extended distances and two hot-swap power supplies specifically designed for high-end switches and routers. These components are intended for those managing long-distance fiber links or requiring power redundancy on critical devices.
ProductsMikroTik CLAIRÉ: Indoor Air Quality Monitoring with Matter over Thread
The MikroTik CLAIRÉ is an indoor environmental sensor that measures CO₂, particulate matter (PM2.5/PM10), VOCs, temperature, and humidity. It is designed for those who want to monitor air quality in real time via a local display or integrate data into local smart home automations using Matter over Thread, without relying on external clouds.
NewsMikroTik GPOE-CON-mini: 48V to 24V PoE Converter
The GPOE-CON-mini is a power converter that transforms a standard 48V PoE signal into 24V Passive PoE power. It allows you to connect antennas and compatible MikroTik devices directly to existing PoE infrastructure, eliminating the need for additional injectors or adapters.
SecurityCritical vulnerability in RouterOS web service
CVE-2026-84411 is a critical vulnerability (CVSS 9.8) in the RouterOS management web service that allows an unauthenticated attacker to execute arbitrary code as root or cause a denial of service. All RouterOS versions below 7.24 are affected. The immediate action is to update the firmware to version 7.24 or later and restrict access to the web service to trusted networks only.
FirmwareRouterOS 7.24.5: New Features and Fixes in the Stable Release
MikroTik has released version 7.24.5 of RouterOS on the "stable" channel. This release fixes regressions introduced in previous versions, improves stability on specific hardware models such as hAP be3 Media and CRS328-24P-4S+, and updates regulatory information for Wi-Fi. It is recommended for those using the stable branch in production.
NewsSolidRACK 5 mini: 5U desktop rack for MikroTik routers
The SolidRACK 5 mini is a 10-inch, 5U desktop rack designed to house routers and switches in limited spaces. Its lightweight aluminum frame and tool-free mounting system make it suitable for home or office installations where visual cleanliness and ease of access are prioritized over the density of a floor-standing rack.
ProductsKNOT Gateway LR8: Rugged IoT Gateway with LoRa and LTE
The KNOT Gateway LR8 is a rugged IoT gateway with IP66 protection, designed to collect data from BLE 5.1 sensors and 868 MHz LoRa devices in industrial or outdoor environments. It stands out for its ability to integrate LTE Cat 1 bis, 2.4 GHz Wi-Fi, and Gigabit Ethernet backhaul, allowing direct installation near devices without relying on existing cabling.
ProductsMikroTik CRS326-4C+20G+2Q+RM: L2/L3 Switch with 2.5G and QSFP+ Ports
The MikroTik CRS326-4C+20G+2Q+RM is an enterprise rackmount switch designed for professional environments requiring high density of 2.5 Gigabit Ethernet ports. It features four combo ports (2.5G/SFP+) and two 40 Gbps QSFP+ slots, providing high-speed fiber connectivity without the need for additional equipment. It is ideal for video production studios, offices, and data centers that require link aggregation and Layer 3 routing on a single compact device.
DojoMikroTik in Wi-Fi station and bridge mode: why nothing passes through (and how to fix it)
A MikroTik connected as a client to another access point's Wi-Fi, with a camera behind it: why it doesn't work in station mode, how to fix it with station-pseudobridge, and why the old bridge NAT trick breaks.
ProductsMikroTik CRS812 DDQ: Network switch with 400G ports
The MikroTik CRS812 DDQ is a rack-mounted switch delivering speeds up to 400 Gbps in enterprise and WISP environments. It stands out for its use of RouterOS v7, a quad-core ARM CPU, and a mix of SFP56 and QSFP-DD ports, allowing you to integrate legacy 10G infrastructure with high-density uplinks.
SecurityDoS on BGP in RouterOS via NLRI VPN
CVE-2026-93345 is an improper input validation vulnerability in the routing service of MikroTik RouterOS that allows an unauthenticated attacker to crash the BGP service. Versions up to 7.24.2 are affected, including the long-term release 7.23.5; the fix is only present in the development version 7.25beta4. To mitigate the risk, restrict access to the BGP service to authorized peers only and monitor the availability of a corrected stable release.
FirmwareRouterOS 7.23.7 long-term: critical LTE fix and upgrade guide
MikroTik has released version 7.23.7 of the long-term channel to fix a severe regression introduced in 7.23.6 that caused the deletion of LTE module firmware on specific models. If you have upgraded to 7.23.6 or 7.24.3, you must immediately switch to 7.23.7 (or 7.24.4) and restore the modem firmware to recover connectivity.
ProductsMikroTik CRS328-4C-20S-4S+RM: L2/L3 Rackmount Switch
The MikroTik CRS328-4C-20S-4S+RM is a 1U smart switch with 28 ports, designed for environments requiring high optical connectivity density and management flexibility. It stands out for its ability to run both RouterOS and SwOS via dual boot, allowing you to choose between advanced routing features or a simplified operating system dedicated exclusively to switching.