{
  "id": "CVE-2026-86060",
  "vendor_project": "MikroTik",
  "product": "RouterOS",
  "description": "MikroTik RouterOS contains an improper neutralization of argument delimiters in a command vulnerability which allows an attacker to change the trusted RouterOS policy mask, leading to privilege escalation.",
  "kev_date_added": "2026-09-10",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}