<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: MikroTik RouterOS</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/mikrotik-routeros.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-67279/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-67279/</guid><pubDate>Fri, 25 Sep 2026 00:00:00 +0000</pubDate><description>Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.</description></item><item><title>CVE-2026-86060: MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-86060/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-86060/</guid><pubDate>Thu, 10 Sep 2026 00:00:00 +0000</pubDate><description>MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.</description></item><item><title>CVE-2026-67277: MikroTik RouterOS Missing Authentication for Critical Function Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-67277/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-67277/</guid><pubDate>Thu, 10 Sep 2026 00:00:00 +0000</pubDate><description>MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service.</description></item></channel></rss>
