{"revision":"0e223e8b38c7490b840720abc3d5e205","evidence":{"cve":"CVE-2026-86060","kev":{"cve":"CVE-2026-86060","product":"RouterOS","name":"MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability","dateAdded":"2026-09-10","dueDate":"2026-09-13","knownRansomwareUse":false,"shortDescription":"MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.","vendor":"MikroTik","isMicrosoft":false,"products":[],"advisoryUrl":"https://mikrotik.com/supportsec/september-2026-vulnerability","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86060","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-86060"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"30dfdcd1f2cc0c1bfabcaea7"}}