SecurityOnlineDo Son
MikroTik routers hit by critical CVE-2026-16347 bruteforce flaw
Part of the CVE-2026-16347 story · since 1 Aug
Quiet for 13 weekslast report 1 Aug1 article1 outlet
- Sat 1 Aug, 02:11 UTC. SecurityOnline, first report. MikroTik routers hit by critical CVE-2026-16347 bruteforce flaw. This article, 1st of 1.
CVE-2026-16347 is a critical vulnerability in MikroTik RouterOS and Cloud Hosted Router that allows attackers to execute brute-force attacks to gain unauthorized system access. Rated with a CVSS score of 8.8, the flaw enables unlimited authentication attempts, facilitating password guessing. Affected versions include all iterations of MikroTik software, with no fix currently available.
Recommended mitigations include shielding the API behind a VPN, restricting management access, applying firewall rules, and employing strong, random passwords to mitigate the risks.
How the story developed
Quiet for 13 weekslast report 1 Aug1 article1 outlet
1 article from 1 outlet since 1 Aug. Quiet since 1 Aug. This was the first report.
- Sat 1 Aug, 02:11 UTC. SecurityOnline, first report. MikroTik routers hit by critical CVE-2026-16347 bruteforce flaw. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Sat 1 AugDay 01
- MikroTik routers hit by critical CVE-2026-16347 bruteforce flaw02:11 · SecurityOnline · First report · This article, 1st of 1