MikroTik RouterOS and Cloud Hosted Router

[Starburst-David]

Summary

Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access.

The following versions of MikroTik RouterOS and Cloud Hosted Router are affected:

• RouterOS vers:all/* (CVE-2026-16347)

• Cloud Hosted Router vers:all/* (CVE-2026-16347)

CVSS Vendor Equipment Vulnerabilities
v3 8.8 MikroTik MikroTik RouterOS and Cloud Hosted Router Improper Restriction of Excessive Authentication Attempts


Full Advisory at:
https://www.cisa.gov/news-events/ics-ad ... -26-209-05