Skip to content
Broadcom Wi-Fi Vulnerability Allows Remote Code Execution

Broadcom Wi-Fi Vulnerability Allows Remote Code Execution

First seen 19 Oct 2026, 02:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 03:50 UTC
  • •The vulnerability allows remote code execution without authentication.
  • •Affected devices include routers from major Belgian ISPs, with millions potentially at risk.
  • •No patches have been released for affected devices as of October 15, 2026.

A 16-year-old vulnerability in Broadcom's 802.11 implementation enables attackers to execute code on affected routers without authentication. This flaw has existed in Broadcom's SDK since at least 2010 and was partially patched in 2018. Researchers have demonstrated exploitation on devices from major Belgian ISPs, including Orange and Proximus, with no patches available as of October 15, 2026. The vulnerability allows attackers to gain unauthenticated remote code execution and extract Wi-Fi passwords from the routers' memory. Broadcom has not assigned a CVE to this vulnerability, which affects millions of devices worldwide. The attack can be executed from a distance, making it a significant risk for users of affected routers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2010-01-01
Vulnerability discovered
A flaw in Broadcom's 802.11 implementation was introduced in their SDK.
Quentinkaiser.Be
2018-01-01
Partial patch released
Broadcom released an incomplete patch for the vulnerability but did not assign a CVE.
Quentinkaiser.Be
2026-10-15
No patches available
As of this date, none of the affected devices in Belgium had received a patch.
Quentinkaiser.Be

More articles in this cluster (2)

Following this threat?

Track Askey in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 2

Common questions

Which devices are affected?
Devices from various OEMs using Broadcom's 802.11 implementation, particularly those from Belgian ISPs like Orange and Proximus.
Is this vulnerability being actively exploited?
Yes, researchers have demonstrated the exploit in real-world scenarios against multiple devices.
What should users do to protect themselves?
Users should monitor for any patches from their ISP and consider using alternative routers until a fix is available.