{"id":12030,"date":"2026-08-05T11:52:28","date_gmt":"2026-08-05T17:52:28","guid":{"rendered":"https:\/\/beaconlab.us\/publicacion\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/"},"modified":"2026-09-29T15:59:28","modified_gmt":"2026-09-29T21:59:28","slug":"alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/","title":{"rendered":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Affected product(s):<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>MikroTik RouterOS \u2013 all versions<\/li>\n\n\n\n<li>MikroTik Cloud Hosted Router \u2013 all versions<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">Description<\/h2>\n\n<p class=\"wp-block-paragraph\">CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available as of the date of publication; ZoomEye identifies more than 934,000 globally exposed instances.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>MikroTik RouterOS<\/strong> is the proprietary operating system developed by MikroTik and used in routers, switches, and network devices widely deployed across enterprise environments, ISPs, and critical and industrial infrastructure worldwide. On July 28, 2026, the vulnerability <strong>CVE\u20112026\u201116347<\/strong> (CVSS 4.0: <strong>8.7 \/ CVSS 3.1: 8.8 \u2013 High<\/strong>) was published, classified as <strong>CWE\u2011307 (Improper Restriction of Excessive Authentication Attempts)<\/strong>, affecting the authentication handling of the <strong>administration API<\/strong> of RouterOS and Cloud Hosted Router across <strong>all available versions<\/strong>. CISA published a specific advisory on this vulnerability, and the ZoomEye team identified more than <strong>934,800 globally exposed instances<\/strong> searchable using the filter vul.cve=&#8221;CVE-2026-16347&#8243; or the dork app=&#8221;MikroTik RouterOS&#8221;.<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>CVE\u20112026\u201116347 \u2013 Improper Restriction of Excessive Authentication Attempts in RouterOS API (CVSS 4.0: 8.7 \/ CVSS 3.1: 8.8 \u2013 High)<\/strong><\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">The MikroTik RouterOS API authentication system does not implement effective controls against excessive login attempts. Specifically:nvd.nist+2<\/p>\n\n<ul class=\"wp-block-list\">\n<li>There is no significant <strong>rate limiting<\/strong> for failed authentication attempts.<\/li>\n\n\n\n<li>There is no <strong>account lockout<\/strong> mechanism or account blocking after multiple failures.<\/li>\n\n\n\n<li>No <strong>source IP restrictions<\/strong> are applied to repeated attempts.<\/li>\n\n\n\n<li>In some versions there is a <strong>fixed per-connection delay<\/strong>, but it can be easily bypassed through <strong>concurrent sessions<\/strong>, allowing a high volume of attempts to be distributed across multiple simultaneous connections.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">As a result, an attacker with network access to the administration API can execute large-scale <strong>brute-force, password spraying, or credential stuffing<\/strong> attacks without the device offering effective resistance, until obtaining valid administrator credentials. Successful exploitation grants full administrative access to the device, including configuration modification, access to stored credentials, persistence establishment, and use of the device as a pivot toward the internal network.<\/p>\n\n<p class=\"wp-block-paragraph\">The risk is especially high when administration services (API, WinBox, WebFig) are exposed directly to the Internet or untrusted networks, which applies to a significant fraction of the more than 934,000 instances identified by ZoomEye.<\/p>\n\n<h2 class=\"wp-block-heading\">Mitigation<\/h2>\n\n<p class=\"wp-block-paragraph\">As of the publication date of this bulletin, <strong>no official patch is available<\/strong> from MikroTik for CVE\u20112026\u201116347. The following mitigation measures must be applied immediately:<\/p>\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Restrict access to the API and administration services<\/strong><br \/>Limit access to management services (API port 8728\/8729, WinBox port 8291, WebFig\/HTTPS, SSH, Telnet) exclusively to trusted administration IPs through firewall or ACLs in IP \u2192 Services.<\/li>\n\n\n\n<li><strong>Disable unnecessary administration services<\/strong><br \/>Disable Telnet, FTP, unencrypted HTTP WebFig, plain API (without SSL), proxy, SOCKS, UPnP, and remote DNS if they are not strictly required.<\/li>\n\n\n\n<li><strong>Implement additional access controls<\/strong><br \/>Use IP whitelists on each enabled administration service in IP \u2192 Services \u2192 Allowed From.<\/li>\n\n\n\n<li><strong>Enable two-factor authentication where possible<\/strong><br \/>Configure additional firewall rules that restrict API access only from management network segments.<\/li>\n\n\n\n<li><strong>Check exposure in ZoomEye<\/strong><br \/>Identify whether the organization&#8217;s devices appear exposed using the filter:<br \/>vul.cve=&#8221;CVE-2026-16347&#8243; or the dork app=&#8221;MikroTik RouterOS&#8221;<br \/>Search link: https:\/\/www.zoomeye.hk\/searchResult?q=vul.cve%3D%22CVE-2026-16347%22<\/li>\n\n\n\n<li><strong>Review authentication logs<\/strong><br \/>Search the router logs for massive failed authentication attempts or attempts from unknown IPs as an indicator of ongoing exploitation.<\/li>\n<\/ol>\n\n<h2 class=\"wp-block-heading\">Solution<\/h2>\n\n<p class=\"wp-block-paragraph\">MikroTik has not published an official specific patch for CVE\u20112026\u201116347 as of the date of publication. It is recommended to:<\/p>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Product<\/strong><\/td><td><strong>Patch status<\/strong><\/td><td><strong>Recommended action<\/strong><\/td><\/tr><\/thead><tbody><tr><td>MikroTik RouterOS \u2013 all versions<\/td><td>No patch available as of the date of publication<\/td><td>Apply the mitigations listed above and monitor the MikroTik security channel<\/td><\/tr><tr><td>MikroTik Cloud Hosted Router \u2013 all versions<\/td><td>No patch available as of the date of publication<\/td><td>Apply the mitigations listed above and monitor the MikroTik security channel<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\">Monitor the official MikroTik security portal for the patch publication:<\/p>\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/mikrotik.com\/supportsec\n<\/div><\/figure>\n\n<h2 class=\"wp-block-heading\">Additional information:<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>NVD \u2013 CVE\u20112026\u201116347<br \/>https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-16347<\/li>\n\n\n\n<li>CISA \u2013 Advisory CVE\u20112026\u201116347<br \/>https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog<\/li>\n\n\n\n<li>Secarma \u2013 MikroTik routers vulnerable to rapid password brute forcing<br \/>https:\/\/secarma.com\/29-07-2026-mikrotik-authentication-vulnerability<\/li>\n\n\n\n<li>Mallory.ai \u2013 Brute-forceable API Authentication in MikroTik RouterOS<br \/>https:\/\/mallory.ai\/vulnerabilities\/CVE-2026-16347<\/li>\n\n\n\n<li>ZoomEye \u2013 Search for exposed instances (CVE\u20112026\u201116347)<br \/>https:\/\/www.zoomeye.hk\/searchResult?q=vul.cve%3D%22CVE-2026-16347%22<\/li>\n\n\n\n<li>MikroTik Forum \u2013 Technical discussion CVE\u20112026\u201116347<br \/>https:\/\/forum.mikrotik.com\/t\/euvd-2026-50017-cve-2026-16347-ghsa-8v62-p5rj-72&#215;6-which-routeros-version-does-fix-that\/271934<\/li>\n\n\n\n<li>MikroTik Security Portal<br \/>https:\/\/mikrotik.com\/supportsec<\/li>\n<\/ul>\n","protected":false},"featured_media":11641,"template":"","class_list":["post-12030","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"547\" \/>\n\t\t<meta property=\"og:image:height\" content=\"365\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-05T17:52:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-29T21:59:28+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#listItem\",\"name\":\"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#listItem\",\"position\":2,\"name\":\"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/\",\"name\":\"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab\",\"description\":\"Affected product(s): MikroTik RouterOS \\u2013 all versions MikroTik Cloud Hosted Router \\u2013 all versions Description CVE\\u20112026\\u201116347 (CVSS 8.8 \\u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/mikrotik_routeros.jpeg\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#mainImage\",\"width\":547,\"height\":365},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/publication\\\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\\\/#mainImage\"},\"datePublished\":\"2026-08-05T11:52:28-06:00\",\"dateModified\":\"2026-09-29T15:59:28-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab","description":"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available","canonical_url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#listItem","name":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#listItem","position":2,"name":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/en\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/en\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/en\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#webpage","url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/","name":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab","description":"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/beaconlab.us\/en\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg","@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#mainImage","width":547,"height":365},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/#mainImage"},"datePublished":"2026-08-05T11:52:28-06:00","dateModified":"2026-09-29T15:59:28-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/en\/#website","url":"https:\/\/beaconlab.us\/en\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"en-US","publisher":{"@id":"https:\/\/beaconlab.us\/en\/#organization"}}]},"og:locale":"en_US","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab","og:description":"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available","og:url":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg","og:image:width":547,"og:image:height":365,"article:published_time":"2026-08-05T17:52:28+00:00","article:modified_time":"2026-09-29T21:59:28+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS - Beacon Lab","twitter:description":"Affected product(s): MikroTik RouterOS \u2013 all versions MikroTik Cloud Hosted Router \u2013 all versions Description CVE\u20112026\u201116347 (CVSS 8.8 \u2013 High) has been published in MikroTik RouterOS and Cloud Hosted Router: an authentication flaw with no effective rate limiting that allows an attacker to brute-force the administration API until obtaining valid credentials. No patch is available","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/mikrotik_routeros.jpeg"},"aioseo_meta_data":{"post_id":"12030","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-09-29 21:59:28","updated":"2026-09-29 21:59:48","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/en\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/en\/"},{"label":"Alert 2026-83 Critical DoS Vulnerability in MikroTik RouterOS","link":"https:\/\/beaconlab.us\/en\/publication\/alert-2026-83-critical-dos-vulnerability-in-mikrotik-routeros\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12030","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12030\/revisions"}],"predecessor-version":[{"id":12031,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/publicacion\/12030\/revisions\/12031"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media\/11641"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/en\/wp-json\/wp\/v2\/media?parent=12030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}