Broadcom Wi-Fi vulnerability leaves over 1.5 million Belgian gateways exposed

A Broadcom Wi-Fi vulnerability demonstrated on October 16, 2026, lets attackers within wireless range execute code on routers without knowing the network password. Dating back to at least 2010, the flaw has lingered in Broadcom’s software development kit, and by the time the disclosure deadline passed on October 15, 2026, not a single device examined in Belgium had been patched. Key takeaways The WPS flaw permits unauthenticated code execution over Wi-Fi. Belgium’s estimated exposure exceeds 1.5 million gateways. Broadcom declined to assign a CVE, and its earlier patch was incomplete.

Source: The Cryptonomist