CISA KEV: CVE-2026-67279 — MikroTik RouterOS actively exploited

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability. Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates