mikrotik routeros

CISA has published advisory ICSA-26-211-01 for CVE-2026-14227, a MikroTik RouterOS API session-management flaw that can leave a user’s prior permissions active after their account has been downgraded or an inactivity timeout occurs. The practical risk is not an unauthenticated router takeover...

MikroTik RouterOS and Cloud Hosted Router deployments face a newly disclosed authentication-hardening problem that could make exposed management interfaces far more susceptible to password-guessing attacks than administrators may expect. A CISA industrial control systems advisory warns that the...