WillItSurvive

Latvian maker of cheap routers and wireless gear used by ISPs and network pros worldwide.

Defensible for now
Assessed 25 July 2026 · Evidence as of 25 July 2026
Real protection, with named pressure against it.
On the recordSince 25 July 2026 · Checkable from April to July 2026 · Every call on the record Checkpoint: FCC foreign-made-router rule takes effect, could cut US market access
The call

MikroTik keeps shipping cheap, reliable hardware that bigger vendors won't chase, while a possible US import ban and repeated critical security flaws remain unresolved risks.

MikroTik is a 30-year-old company from Latvia that builds networking equipment, mainly routers priced between $50 and $500, sold to internet service providers and smaller businesses. The company is hard to beat in this price range because Cisco and HPE cannot make routers that cheap and still make enough profit, so they have stayed out of this market. However, two things could seriously hurt MikroTik: the U.S. government may ban foreign-made routers starting in mid-2026, which could cut off an unknown chunk of their business, and the company has had repeated serious security problems in its products that hackers have exploited, which could make customers stop trusting them if another major flaw surfaces soon.

Why
01
AI pressure: None apparent. No AI product is currently pulling buyers away from RouterOS; the threat here is regulatory and security, not AI. Could AI do the core job? Unlikely.
02
Bigger players: Ubiquiti. Ubiquiti's cloud-managed UniFi line competes directly for the same prosumer and ISP-grade buyers who might otherwise pick MikroTik. Could a giant copy it? No, they are blocked.
03
What protects it. Cisco and HPE cannot profitably serve MikroTik's $50 to $500 price band, and MikroTik funds itself with roughly 25% net margins and no debt.
What would change this call
FCC implements or enforces its foreign-made-router ban between April and July 2026. Would show MikroTik losing material U.S. market access.
Another CVSS-9 or 10 vulnerability disclosed in RouterOS within the next year. Would show a worsening security pattern risking enterprise/regulatory blacklisting.
Ubiquiti reports growth in ISP/WISP customer accounts or MikroTik reports flat/declining ISP sales. Would show cloud-managed UniFi actively pulling share from MikroTik.
Key numbers
  • 2023 revenue: 401.6 million euros (2023)
  • 2023 net income: 100.1 million euros (2023)
  • 13,000 routers hit by a single botnet (January 2025)
Named risks
  • FCC foreign-made-router rules (Apr-Jul 2026) could restrict US market access; exposure size unknown. Severity: high
  • Recurring critical CVEs (CVSS-10, auth-bypass, DoS) could trigger enterprise or regulatory blacklisting. Severity: high
  • Unconfirmed Iranian state media allegation (2026-04) of backdoor exploitation poses reputational exposure. Severity: medium
  • Large-scale botnet hijacking of misconfigured routers (approx 13,000 in Jan 2025) signals recurring operational abuse. Severity: medium
  • Conflicting revenue and headcount figures across sources obscure true current company scale. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
UbiquiticontestingDirect peer in prosumer/ISP wireless and switch gear, stable coexistence as of 2026-02-12
CiscocontestingEnterprise incumbent structurally unable to profitably chase MikroTik's $50-$500 price tier
HPEcontestingDoubled networking footprint via ~$14B Juniper deal closed 2025-07, still blocked from down-market
TP-LinkcontestingDominant in consumer Wi-Fi but facing reported US antitrust probe over pricing, per 2026-01-06 report
Questions people ask
Is MikroTik profitable?
Yes. Per Latvian corporate registry data cited by Wikipedia, MikroTik posted 2023 revenue of 401.6 million euros and net income of 100.1 million euros, roughly a 25% net margin, with no external VC funding involved as of 2026-07-25.
Who owns MikroTik?
MikroTik is privately owned, split 50/50 between co-founders John Tully and Arnis Riekstins, who founded the company on 1996-03-14. No IPO, acquisition, or outside funding round has been reported through 2026-07-25.
Could AI replace MikroTik?
Unlikely soon. As of 2026-07-25, RouterOS changelogs through v7.20-v7.22 show no AI or ML features shipped, only conventional networking upgrades. MikroTik's moat is ASIC-level hardware and firmware, not a workflow AI can easily replicate.
Is joining MikroTik risky right now?
The core business looks stable: profitable since at least 2022 and self-funded with no layoffs reported. But a live FCC foreign-made-router rule (April to July 2026) and recurring critical CVEs, including a CVSS-10.0 flaw disclosed 2025-10-29, are unresolved external risks.
Who is MikroTik's biggest competitor?
Ubiquiti is the closest direct peer, competing in the same prosumer and ISP-grade wireless/switch segment as of a 2026-02-12 comparison. Cisco and HPE (after its ~$14 billion Juniper deal closed July 2025) are much larger but structurally can't profitably chase MikroTik's $50-$500 price tier.
Will the FCC router ban hurt MikroTik?
It's a live, unresolved risk. New FCC rules reported between 2026-04-01 and 2026-04-07 restrict foreign-made Wi-Fi routers, potentially affecting MikroTik alongside TP-Link, Eero, and Netgear, but MikroTik's actual U.S. revenue exposure is not publicly known.
Timeline
  • 2026-07-15CVE-2026-39042 DoS flaw disclosed affecting RouterOS 7.21.x/7.22.x
  • 2026-06-11New LoRaWAN sensor tags, F-Droid app, eSIM support added to Chateau 5G router
  • 2026-04-07Report says FCC foreign-made-router ban will disrupt majority of vendors including MikroTik
  • 2026-04-01PCMag lists MikroTik among brands hit hardest by FCC foreign router ban
  • 2026-01-20RouterOS v7.21 stable release published with regular changelog
  • 2025-10-29CVSS-10.0 flaw CVE-2025-61481 exposes router admin credentials over HTTP WebFig
  • 2025-08-18VXLAN authentication-bypass flaw CVE-2025-6443 disclosed
  • 2025-07HPE completes roughly $14 billion acquisition of Juniper Networks
  • 2025-01-21About 13,000 MikroTik routers hijacked by botnet abusing SPF DNS misconfigurations
  • 2023Latvian registry data shows 401.6 million euro revenue and 100.1 million euro net income
Revision history
25 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources