CISA Warns MikroTik RouterOS Flaw Is Exploited to Escalate Privileges

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical MikroTik RouterOS privilege-escalation vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, warning that the flaw is being actively exploited in the wild. Tracked as CVE-2026-86060, the issue affects MikroTik RouterOS and stems from improper...