MikroTik RouterOS and Cloud Hosted Router
view advisory published 2026-07-28
Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-16347US | — | — | ||
MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessive login attempts. The system does not enforce meaningful ra… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-209-05 JSONself
- ICSA Advisory ICSA-26-209-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationCloud Hosted Router
Apply firewall rules to control and restrict access to management services where possible.
- MitigationRouterOS
Apply firewall rules to control and restrict access to management services where possible.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan