568/69 Monday, October 19, 2026
Cybersecurity researchers have disclosed a vulnerability hidden in software used by Broadcom Wi-Fi chipsets that has been deployed since 2010. The flaw could allow an attacker within wireless signal range to execute malicious commands and take control of a router without knowing the password or completing an authentication process. The issue affects networking equipment used by multiple telecommunications providers worldwide. Initial estimates suggest that more than 1.5 million routers may be exposed in Belgium alone, with potentially many more affected devices in other countries because the vulnerable chipsets have been widely integrated into numerous products.
The vulnerability stems from improper handling of WPS EAP data. Researchers demonstrated that an attacker could extract passwords from router memory or establish a reverse control channel directly through specially crafted Wi-Fi frames. Affected devices include those running the eCos operating system, such as chipsets BCM3380, BCM3383, and BCM33834, where the vulnerability is considered effectively unpatchable under the existing architecture. Linux-based devices using chipsets such as BCM3390, BCM65xx, and BCM68xx may be remediated depending on firmware updates provided by individual device manufacturers. Reports indicate that Broadcom previously released an incomplete fix in 2018 and advised manufacturers to migrate to a different software architecture. Broadcom also reportedly declined to request a CVE identifier for the issue.
The primary risk is targeted exploitation within physical Wi-Fi range, including in public networks, hotels, or situations involving surveillance of specific individuals, as routers are often overlooked in security monitoring. Administrators and users should identify the models of devices in use and closely follow firmware updates from manufacturers or internet service providers. If a device belongs to a permanently vulnerable product line that cannot be patched, replacement with a supported model should be considered. Researchers are also preparing to release a detection tool that organizations can use to assess their exposure and identify affected devices on their networks for remediation.