Skip to content
OpenAdvisories
High ICSA-26-209-05 1 CVE

MikroTik RouterOS and Cloud Hosted Router

Published Jul 28, 2026 · Updated Jul 28, 2026

Vendor: MikroTik Product: Cloud Hosted Router Product: RouterOS

Summary

Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access.

Vulnerabilities 1

  • High 8.8
    CVE-2026-16347

    Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router

    MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessive login attempts. The system does not enforce meaningful rate-limiting, account lockout, or source-based restrictions, allowing repeated a…

    MikroTik RouterOS Cloud Hosted Router Network devices

Revision history

  1. #1

    Initial Publication

References