Known Exploited Vulnerabilities September 10, 2026 · CISA KEV Catalog

CVE-2026-86060: Mikro Tik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability

MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-86060MikroTik

Related

CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability Known Exploited Vulnerabilities · Sep 25, 2026

CVE-2026-67277: Mikro Tik RouterOS Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Sep 10, 2026

CVE-2018-7445: Mikro Tik RouterOS Stack-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 08, 2022