Broadcom Wi-Fi vulnerability leaves over 1.5 million Belgian gateways exposed

A Broadcom Wi-Fi vulnerability demonstrated on October 16, 2026, lets attackers within wireless range execute code on routers without knowing the network password. Dating back to at least 2010, the flaw has lingered in Broadcom’s software development kit, and by the time the disclosure deadline passed on October 15, 2026, not a single device examined in Belgium had been patched. Key takeaways The WPS flaw permits unauthenticated code execution over Wi-Fi. Belgium’s estimated exposure exceeds 1.5 million gateways. Broadcom declined to assign a CVE, and its earlier patch was incomplete. How the Broadcom Wi-Fi vulnerability bypasses passwords The flaw sits in Broadcom ’s WPS implementation, specifically the code that reassembles fragmented EAP messages.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Cryptonomist.