Broadcom WPSplinter bug may leave 1.56 million routers exposed

Feeds.4Sysops •IT News • October 19, 2026

Broadcom’s WPSplinter Wi-Fi flaw remains unpatched on the affected Belgian gateways researcher Quentin Kaiser tested as of October 15, despite Broadcom saying a patch was available. The bugs let an attacker within Wi-Fi range execute code without the network password; Kaiser estimates 1.56 million gateways from Proximus, VOO, and Orange Belgium could be affected. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Unpatched Broadcom Wi-Fi Flaw Allows Remote Code Execution on Millions of Routers A vulnerability in Broadcom's Wi-Fi Protected Setup (WPS) allows attackers within radio range to execute code on routers without authentication. Disclosed by researcher Quentin Kaiser at Hexacon on October 16, 2026, this flaw has existed since at least 2010 and affects millions of devices globally, including those from major brands like Cisco and Netgear. As of October 15, 2026, no patches have been deployed for the affected devices in Belgium, where approximately 1.5 million routers are estimated to be vulnerable. The vulnerability enables attackers to extract Wi-Fi passwords and gain unauthorized access to networks. Broadcom has not assigned a CVE for this issue, and previous attempts to patch it were incomplete. The flaw specifically targets the memory handling in WPS, allowing for exploitation without user interaction. Security professionals are urged to assess their devices and monitor for updates. 12 sources 65

Extracted Entities

Broadcom WPSplinter bug may leave 1.56 million routers exposed

The full story

Extracted Entities

Attack Types (1)

Companies (3)

Countries (1)

Vulnerabilities (1)