cve 2026 14227

CISA has published advisory ICSA-26-211-01 for CVE-2026-14227, a MikroTik RouterOS API session-management flaw that can leave a user’s prior permissions active after their account has been downgraded or an inactivity timeout occurs. The practical risk is not an unauthenticated router takeover...