Back Buttondown

October 18, 2026

Buttondown • October 18, 2026

One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux | QTNKSR

A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms, its impact on the global router supply chain, and a disclosure process rather … interesting.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Unpatched Broadcom Wi-Fi Flaw Allows Remote Code Execution on Millions of Routers A vulnerability in Broadcom's Wi-Fi Protected Setup (WPS) allows attackers within radio range to execute code on routers without authentication. Disclosed by researcher Quentin Kaiser at Hexacon on October 16, 2026, this flaw has existed since at least 2010 and affects millions of devices globally, including those from major brands like Cisco and Netgear. As of October 15, 2026, no patches have been deployed for the affected devices in Belgium, where approximately 1.5 million routers are estimated to be vulnerable. The vulnerability enables attackers to extract Wi-Fi passwords and gain unauthorized access to networks. Broadcom has not assigned a CVE for this issue, and previous attempts to patch it were incomplete. The flaw specifically targets the memory handling in WPS, allowing for exploitation without user interaction. Security professionals are urged to assess their devices and monitor for updates. 12 sources 65

Extracted Entities

October 18, 2026

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (2)