← Incidents
INCIDENT 489Exploited vulnerabilityLOW / UNDER REVIEWSourced
CVE-2026-86060 added to CISA KEV: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
<p>CISA has added two new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-67277" target="_blank">CVE-2026-67277</a> MikroTik RouterOS Missing Authentication for Critical Function Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-86060">CVE-2026-86060</a> MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability</li> </ul> <p>These types…
Last evidence update
25 SEP 2026 · 12:00 UTC
Source count
5
Status
reported
GovernmentCVE-2026-86060CVE-2026-67277CVE-2026-67279CVE-2026-65660
Observation history
How this record has evolved as evidence accumulated.
11 SEP · 05:22 UTC
Initial report
11 SEP · 05:22 UTC
Second independent source
11 SEP · 05:22 UTC
Related CVE identified (CVE-2026-67277)
11 SEP · 05:22 UTC
Second independent source
11 SEP · 05:22 UTC
Summary updated from new evidence
26 SEP · 05:22 UTC
Second independent source
26 SEP · 05:22 UTC
Related CVE identified (CVE-2026-67279)
26 SEP · 05:22 UTC
Second independent source
26 SEP · 05:22 UTC
Related CVE identified (CVE-2026-65660)
Evidence
CISA KEV · high
CVE-2026-86060 added to CISA KEV: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
CISA KEV · high
CVE-2026-67277 added to CISA KEV: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
CISA · high
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA KEV · high
CVE-2026-67279 added to CISA KEV: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
CISA · high
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Related incidents