Skip to content
pwned.coffee
Updated 31 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
10 Sept 2026
1 new, 0 updated.
New that day
high
patched
exploited
10 Sept 2026
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation. Can be chained with CVE-2026-67277. Added to CISA KEV on 2026-09-10 (federal deadline 2026-09-13).
CVE-2026-67277
CVE-2026-86060
4 sources