MikroTik RouterOS and Cloud Hosted Router
MikroTik RouterOS and Cloud Hosted Router vulnerable to password guessing attacks.
MikroTik RouterOS and Cloud Hosted Router are affected by CVE-2026-16347, a vulnerability allowing attackers to guess passwords and gain unauthorized access. The flaw stems from inadequate safeguards against excessive login attempts, such as rate-limiting or account lockout. While no fix is currently available, MikroTik recommends mitigations including VPN usage, restricting network access, and employing strong passwords.
AI summary of the linked source. Not reviewed by an editor. How this works
Run MikroTik?
Get an email when a new story names MikroTik, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCVE-2026-16347 exposes MikroTik RouterOS and Cloud Hosted Router to brute-force and password-guessing attacks due to the absence of rate-limiting and account lockout mechanisms — fundamental access control safeguards. Without these controls, attackers can make unlimited login attempts until they successfully guess credentials, potentially gaining full administrative access to network infrastructure. This is especially critical because routers sit at the perimeter of networks, meaning compromise could expose all downstream systems. The absence of an available patch makes compensating controls — such as VPN-gated access and strong password policies — essential in the interim. Organizations relying solely on the vendor for remediation without implementing mitigations are accepting significant, unmanaged risk.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Next-generation firewall and intrusion prevention
Malicious traffic is blocked at the network edge and between zones.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-16347