CVE-2026-86060 1

Vulnerability (CVE)

CVE-2026-86060: Mikro Tik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 10, 2026

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.

Vulnerabilities & Patching