CVE-2026-86060

Vendor

MikroTik

Product

RouterOS

EPSS

1.00 (p100)

CISA KEV

listed

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 57
   KEV NVD 5 Sep 2026

   MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the…

   MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.

   KEV Fix available CVE-2026-86060 MikroTik
2. 59
   CISA alert CISA 10 Sep 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability…

   Exploited CVE-2026-67277CVE-2026-86060 MikroTik
3. 33
   Advisory CERT Polska 22 Sep 2026

   MikroTrick: technical analysis, disclosure process, and the use of LLM agents

   We describe the technical details of the MikroTrick chain, which combines the CVE-2026-67279 and CVE-2026-86060 vulnerabilities and, when chained, allowed full takeover of a device without authentication. We explain the mechanics…

   CVE-2026-67279CVE-2026-86060 MikroTik
4. 33
   Advisory CERT Polska 5 Sep 2026

   Vulnerabilities in Mikrotik RouterOS software

   CERT Polska has found 6 vulnerabilities (from CVE-2026-67276 to CVE-2026-67279, CVE-2026-67281 and CVE-2026-86060) in Mikrotik RouterOS software.

   CVE-2026-67276CVE-2026-67279CVE-2026-67281+1 more MikroTik
5. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
6. 16
   Research Check Point Research 14 Sep 2026

   14th September – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification provider, has disclosed a data breach…

   CVE-2026-72898CVE-2026-85880CVE-2026-81963+4 more