CVE-2026-86060

MikroTik RouterOS allows attackers to escalate privileges by changing the trusted policy mask via an improper neutralization of argument delimiters.

An attacker can alter the trusted RouterOS policy mask, leading to privilege escalation. DIB organizations must ensure RouterOS is patched and monitored, as this flaw enables lateral movement and unauthorized access to network infrastructure.

Shame score — A known privilege escalation flaw in network infrastructure that allows attackers to change trusted policy masks, indicating a lack of secure development and patching.