What CVE-2026-84411 says about trusting perimeter assumptions on network devices

What CVE-2026-84411 says about trusting perimeter assumptions on network devices The assumption under test Network devices are often treated as part of the perimeter rather than as assets inside it. The reasoning is that a device which enforces filtering is itself protected by that filtering. CVE-2026-84411 puts that reasoning under pressure. The flaw is in the RouterOS web management service, it runs before the login check, and CISA's advisory ICSA-26-272-06 rates it 9.8 Critical with root code execution or denial of service as the outcome. A device enforces policy on traffic that passes thro