{"vulnerability": "CVE-2026-86060", "sightings": [{"uuid": "9f4d5194-bbbb-4314-8131-68b70b0d20c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muse5uamk62w", "content": "CVE-2026-86060 - routeros\nThe SSH login feature in Mikrotik RouterOS can be tricked by using a specially crafted username that starts with a certain character. An attacker who connects to the device can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#routeros #mikrotik #CVE #infosec", "creation_timestamp": "2026-09-05T20:50:07.103841Z"}, {"uuid": "6885f2d2-0e51-418f-9acf-67f4e171f7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7hz5v6cd2tn4v", "content": "CVE-2026-86060 - SSH session privilege manipulation via a crafted username in Mikrotik RouterOS\nCVE ID : CVE-2026-86060\n \n Published : Sept. 5, 2026, 8:17 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : RouterOS contains an argument-handling flaw in the SSH login\npath involving...", "creation_timestamp": "2026-09-05T21:41:13.733626Z"}, {"uuid": "0d5c969e-20af-4725-8441-54884d3c4289", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4dad5054-27d2-428b-8fc0-829ceb08f56b", "content": "", "creation_timestamp": "2026-09-05T22:00:02.360970Z"}, {"uuid": "036e84dd-54f4-479c-8c6c-98cdecc0b2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musihslsjf2g", "content": "\ud83d\udea8 CVE-2026-86060 \u2014 CVSS 9.2 CRITICAL\n\nRouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a pro...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86060\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T22:07:15.493541Z"}, {"uuid": "765b31cf-3258-4f80-a34f-5f6ce71553f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117223727341434987", "content": "A severe vulnerability was disclosed for Mikrotik RouterOS (CVE-2026-86060) https://vuldb.com/vuln/399368", "creation_timestamp": "2026-09-06T10:55:28.996702Z"}, {"uuid": "fb97659d-cd0b-4043-8a54-11f99be88626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-06T11:00:06.456847Z"}, {"uuid": "754ad416-22de-4c71-9b98-64efa238b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muuhza6e3g25", "content": "Just another Tuesday in IT, where exposed MikroTik RouterOS boxes with SSH enabled are currently handing complete administrative control to anyone who asks nicely via CVE-2026-67276 and CVE-2026-86060. We are expected to frantically scramble and patch to RouterOS 7.24.2, 7.23.4, ...\n\nRead full story", "creation_timestamp": "2026-09-06T17:04:26.219591Z"}, {"uuid": "b3ed4d56-30a7-46b2-a295-7edc1a956d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-06T19:00:45.702112Z"}, {"uuid": "57af3b44-525c-4d9e-81fc-12f3d45244cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.cert.si/si-cert-2026-05", "content": "", "creation_timestamp": "2026-09-06T20:45:13.758141Z"}, {"uuid": "29a8ee42-2144-4321-8d70-d977831468aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muv6xcpdk226", "content": "\ud83d\udd34 MikroTrick \u2014 MikroTik routers under active attack\n\nAttackers are exploiting CVE-2026-67276 + CVE-2026-86060 against Internet-exposed RouterOS devices. The chain can bypass normal\n\nstemshop.top/blog/mikroti...\n\n#CVE #CVE202667276 #CVE202686060 #MikroTik #RouterOS #MikroTrick #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T23:55:01.605619Z"}, {"uuid": "730badbb-ac6c-4742-a1ed-3996c6fade8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvbioj4q62r", "content": "MikroTik Routers Bleed Out While Bureaucrats File the Paperwork\nPANIC 84% | Lag 0.0h | GrayZone says attackers are exploiting CVE-2026-67276 and CVE-2026-86060 against Internet-exposed Ro\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T00:40:28.188370Z"}, {"uuid": "c60291d1-b5d8-4f71-a727-f65e15cc0f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "exploited", "source": "Telegram/KOoZLZaOHuOfGd1o1jBcxdChs5lceJwUBhWSWkdTNzxopqjT", "content": "", "creation_timestamp": "2026-09-07T01:00:18.086756Z"}, {"uuid": "8dfdf6d2-fe85-434d-baad-07041b3e93a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://www.acn.gov.it/portale/w/mikrotik-rilevato-sfruttamento-in-rete-di-nuove-vulnerabilita", "content": "MikroTik ha rilasciato aggiornamenti di sicurezza al fine di correggere 6 nuove vulnerabilit\u00e0, di cui 2 con gravit\u00e0 \u201ccritica\u201d e 2 con gravit\u00e0 \u201calta\u201d. Tra queste, si evidenzia lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-67276 e CVE-2026-86060, che potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione e di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-07T01:00:33.059595Z"}, {"uuid": "9e1801e4-5a2b-4a86-9f2c-616e698b212d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muvpl7o4yt2v", "content": "CVE-2026-86060 is trending. Hype score 5, currently #8 on cvemon.\n\nRouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-86060", "creation_timestamp": "2026-09-07T04:52:25.646317Z"}, {"uuid": "444f410c-2c78-45f9-9cda-ec10320e59fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86060", "type": "seen", "source": "https://infosec.exchange/ap/users/116755351765233076/statuses/117229104212538915", "content": "That is a full wipe, you absolute liability.\nPull up your patch notes, apply MikroTik RouterOS security updates addressing CVE-2026-67276, CVE-2026-67277, and CVE-2026-86060, NOW \u2014 before the raid resets and I lose what remains of my sanity.\nReward: You've received the Fallen Raid Leader's Broken Headset. It no longer transmits. Nobody can hear you panic.\n#CyberSecurity #MikroTik #RouterOS #Vulnerability #PrivilegeEscalation #AdminAccessUnlocked (2/2)", "creation_timestamp": "2026-09-07T13:38:41.774404Z"}]}