Get an email when a new major security incident drops. No spam, unsubscribe any time.
Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.
// day
1 new incident, 0 with updates.
› MikroTik RouterOS
MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation. CISA added CVE-2026-86060, CVE-2026-67277, CVE-2026-67279 to the Known Exploited Vulnerabilities catalog on 2026-09-10 based on evidence of active exploitation.