The dojo blog.
Vulnerabilities explained with the commands to protect yourself, RouterOS updates to know before installing them, news and products — in English, from official sources.
SSH Vulnerability in RouterOS: Unauthenticated Access
CVE-2026-67279 allows an unauthenticated client to open an SSH session and send exec requests, enabling the creation, overwriting, or reconstruction of files within the namespace managed by RouterOS. Versions prior to 6.49.21, 7.23.4, and 7.24.2 are affected. The vulnerability is listed in the CISA KEV catalog: you must update the firmware immediately.
DojoThree servers with the same IP on the same LAN: reach them all with MikroTik
Three devices with the same factory address on the same LAN and a PC that needs to talk to all of them: using bridge NAT to answer ARP and IP NAT inside the bridge, on RouterOS 7 you see them as three different addresses, without touching them.
AdvisoriesRouterOS: security advisory and fixed versions
MikroTik has released a critical security update for RouterOS due to a recently discovered vulnerability. While most configurations are not at immediate risk, the update is strongly recommended for all users. The fixed versions include 7.25 beta 3, 7.24.2, 7.23.4, and 6.49.21 (and later).
ProductsCRS354-48P-4S+2Q+RM: 48-Port PoE+ Switch with 40G Uplink
The CRS354-48P-4S+2Q+RM is a 48-port Ethernet rackmount switch with PoE+ power delivery and fiber uplinks up to 40 Gbps. It is designed for professional environments requiring high connection density, centralized device power, and high non-blocking switching performance.
DojoWireGuard VPN from your phone to MikroTik in 5 minutes, with QR code
Your phone joins your home or office network from any Wi-Fi, encrypted. With RouterOS 7, the router automatically generates the keys and phone configuration and displays a QR code to scan with the WireGuard app: interface, firewall, peer, split tunnel, and the precautions you need to know.
ProductsMikroTik CRS518-16XS-2XQ-RM: 100G enterprise switch
The MikroTik CRS518-16XS-2XQ-RM is an enterprise-grade switch designed for data centers and high-density corporate networks. It stands out for its 1.2 Tbps switching capacity, the use of the Marvell Prestera Aldrin2 chip, and hot-swappable power supplies and fans to ensure operational continuity.
ProductsMikroTik CRS320-8P-8B-4S+RM: PoE++ Gigabit Switch
The MikroTik CRS320-8P-8B-4S+RM is the first switch in the MikroTik line to support the PoE++ (802.3bt) standard, designed to power high-consumption devices such as 4K security cameras and LED screens. It stands out for its ability to deliver up to 90W per port and its power supply expandability, making it ideal for environments where power cable management is critical.
DojoMikroTik IP Cloud: a fixed name for the router with a dynamic IP
IP Cloud is MikroTik's free dynamic DNS: it gives the router a fixed name that follows the public address even when it changes. How to enable it, how to verify it, what happens behind the ISP's modem, and why the name alone does not expose the router to the internet.
ProductsCCR2004-16G-2S+PC: MikroTik Router with 16 GbE Ports and 2 SFP+
The CCR2004-16G-2S+PC is a wired network router designed for enterprise and WISP environments that require high performance in a silent form factor. It features 16 Gigabit Ethernet ports and two 10G SFP+ slots, powered by a 64-bit quad-core ARM CPU. It is intended for users who need an "all-in-one" device capable of handling internal traffic and uplink/downlink without bottlenecks.
ProductsChateau 5G R17 ax: 5G router with eSIM and RouterOS v7
The Chateau 5G R17 ax is a MikroTik 5G home router featuring an integrated Release 17 modem, dual-band Wi-Fi 6, and native eSIM support. It is designed for users who require high-performance mobile connectivity without sacrificing the advanced control provided by RouterOS v7, eliminating the exclusive reliance on physical SIM cards.
DojoPort knocking on MikroTik: WinBox opens only for those who knock
The router's management port stays closed to everyone and opens for one hour only to those who touch three ports in the correct sequence. Firewall rules for RouterOS 7, three ways to knock from Linux (knock, nc, and pure bash), and how much you can trust it.
ProductsMikroTik CRS804 DDQ: Compact 400G Switch for AI and Storage
The MikroTik CRS804 DDQ is a compact 1U switch designed for AI clusters, high-speed storage fabrics, and network aggregation. It stands out for its four 400G QSFP-DD ports, RouterOS v7 management, and low power consumption, making it an accessible solution for environments requiring high performance in limited spaces.
ProductsMikroTik CRS326-24S+2Q+RM: Layer 3 Switch with QSFP+ Ports
The MikroTik CRS326-24S+2Q+RM is a professional rackmount switch designed for high-traffic environments, such as data centers and WISP infrastructure. It features two 40 Gbps QSFP+ ports and twenty-four 10 Gbps SFP+ ports, offering a non-blocking switching capacity of 640 Gbps. It is intended for network administrators who require power redundancy and operational flexibility between RouterOS and SwitchOS.