<![CDATA[Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers]]>A researcher has disclosed an unpatched vulnerability in Broadcom's Wi-Fi setup software that allows an attacker within radio range to execute code as root on affected routers. The disclosure comes from security researcher Quentin Kaiser, who published details on October 16.

The most concerning aspect of this flaw is that exploitation requires no network password and no pairing step. An attacker only needs to be within Wi-Fi range of a vulnerable device to attempt the attack.

Kaiser demonstrated the attack working against home gateways provided by three Belgian internet providers. In one of those cases, he was able to read the Wi-Fi password directly off the device. The flaw remains unpatched, meaning Broadcom-based routers that rely on the affected setup software may still be exposed.

At the time of reporting, no specific CVE identifier, advisory number, or patch version was provided. Affected users should monitor vendor advisories from Broadcom and their router or ISP provider for updates, and consider restricting Wi-Fi setup or WPS-style functionality where possible until a fix is available.

Source: The Hacker News

Is your organization running Broadcom-based routers or ISP-supplied gateways that could be exposed to this flaw?

]]>https://xploitlk.com/topic/740/unpatched-broadcom-wi-fi-flaw-lets-attackers-in-range-run-code-as-root-on-routersRSS for NodeTue, 27 Oct 2026 07:48:44 GMTMon, 19 Oct 2026 08:30:18 GMT60