The Main Radio Frequency Center, a body under Roskomnadzor, has instructed Russian telecom operators to inspect MikroTik routers currently in use. This directive follows the discovery of six vulnerabilities in the RouterOS firmware, collectively dubbed MikroTrick by CERT Polska researchers.
The identified security flaws affect the SSH client and server, the bandwidth-test service, the X.509 certificate mechanism, and the WebFig interface. Experts warn that exploiting just two of these vulnerabilities could grant attackers full control over a device. Three of the flaws are classified as high-risk, with scores reaching up to 9.2 out of 10.
MikroTik, a Latvian company that ceased official operations in Russia five years ago, has released patches to address the vulnerabilities. While the manufacturer claims the risks to average users are minimal, the urgent inspection order targets approximately 100,000 devices, with particular concern for the public sector and private businesses.
Data from the first half of 2026 indicates that MikroTik remains a common choice in Russian government procurement for routers, alongside brands like Keenetic, TP-Link, Huawei, and Cisco. Meanwhile, the share of domestic equipment in state procurement contracts has seen a significant decline, dropping to 1.3%.
