First published 9/27/2026, 6:02:15 AM · Last updated 9/27/2026, 6:02:15 AM

CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that can allow an unauthenticated client to open a session channel and send an exec request and can be chained to exploit CVE-2026-86060. CISA requires applying vendor mitigations and following BOD 26-04 guidance, including evaluating internet exposure or discontinuing use if mitigations are unavailable.

Categories: technology, politics-and-governance

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence: 7/10How certain the assessment is based on the clarity and evidence in the cited reporting.
Geographic reach: 4/10How widely the event reaches, from a local area (1) to worldwide impact (10).
Global importance: 5/10The event's broader significance, from limited importance (1) to major global importance (10).
Impact magnitude: 4/10The scale or severity of the real-world impact, from minor (1) to extreme (10).
Positivity: 2/10How harmful or beneficial the event is, from strongly harmful (1) to strongly positive (10).
Urgency: 6/10How time-sensitive the event is, from low urgency (1) to immediate attention needed (10).

Why it matters

Unauthenticated exploitation is possible and CISA directs stakeholders to apply mitigations and BOD 26-04 patching guidance.

Location

Sources

CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Report an issue