GoKawiilResearcher details unpatched Broadcom WiFi flaw exploitable on millions of routers
A security researcher disclosed a vulnerability in Broadcom's proprietary 802.11 parser that has existed in its SDK since at least 2010, with an incomplete fix issued quietly in 2018. The bug can be triggered remotely over WiFi without the network password, enabling information disclosure and remote code execution, and the researcher demonstrated working exploits against routers from three of Belgium's four major ISPs. Broadcom has reportedly known of the issue since 2018, declined to assign it a CVE or disclose it publicly, and instead recommended OEMs migrate to hostapd rather than patching directly.
GoKawiil's interpretation of the reporting above, not reported fact.
Because the flaw sits in proprietary firmware used across eCos and Linux-based chipsets from many vendors, fixing it requires each OEM to act individually, which the researcher suggests explains why so many devices remain vulnerable years later. The lack of a CVE or public advisory from Broadcom may have left vendors and users unaware of the risk, potentially leaving a large share of consumer routers worldwide exposed to remote takeover. Releasing a fingerprinting tool and YARA rule could help the security community map the true scale of affected devices.
- Vulnerability in Broadcom's 802.11 implementation dates back to at least 2010, with a partial patch only in 2018.
- Exploitable remotely over WiFi without the network key, allowing information disclosure and code execution; demonstrated on routers from 3 of 4 Belgian ISPs.
- Broadcom reportedly knew since 2018 but did not assign a CVE or disclose publicly, leaving many devices unpatched as of October 2026.
GL.iNet GL-AX1800 OpenWrt Router — If your current router runs on a vulnerable Broadcom SDK that may never get a real patch, switching to a router with fully open, actively maintained firmware like OpenWrt is a solid move. The GL.iNet GL-AX1800 ships with OpenWrt support, giving you transparency into the WiFi stack and faster security updates instead of relying on forever-day proprietary code. It's a practical step toward regaining control over your home network's security.
See GL.iNet GL-AX1800 OpenWrt Router on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: quentinkaiser.be, 2026-10-16
Published there as: “One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.