CISA Warns MikroTik RouterOS Flaw Is Exploited to Escalate Privileges

**Executive Summary:** CISA added two MikroTik RouterOS vulnerabilities to its KEV Catalog — CVE-2026-86060, an actively exploited privilege-escalation bug that can alter trusted policy masks and grant elevated router privileges, and CVE-2026-67277, a missing-authentication flaw that may cause kernel-memory disclosure and DoS. Affected organizations are urged to identify exposed RouterOS devices, apply vendor mitigations, perform forensic triage for CVE-2026-86060, and review logs for suspicious configuration changes and privileged activity.