Millions of Routers Exposed by 16-Year-Old Unpatched Broadcom Vulnerability
A critical flaw in Broadcom software leaves millions of global routers vulnerable to remote takeover.
1The WPSplinter Security Flaw
Security researcher Quentin Kaiser identified a critical vulnerability, dubbed WPSplinter, residing within Broadcom software. This 16-year-old flaw affects millions of routers globally, including models from Asus, TP-Link, Netgear, Cisco, and Linksys. The issue exists within the Wi-Fi Protected Setup protocol, allowing attackers to perform remote code injection and gain unauthorized device control.
2Technical Mechanism of Exploitation
The vulnerability triggers memory errors when routers process manipulated WPS codes. By exploiting these specific memory handling weaknesses, attackers can bypass security permissions without alerting the user. Because the flaw is embedded deep within the Broadcom software stack, it impacts both consumer-grade hardware and business-oriented networking equipment across various manufacturers.
3Historical Patching Failures
Broadcom released a partial update in 2018, eight years after the initial report, but failed to fully resolve the underlying issue. The company shifted responsibility to device manufacturers to adapt the software, which resulted in no effective implementation. This lack of accountability has left the vulnerability active in the wild for over a decade.
4Recent Disclosure and Stagnation
In July 2026, Quentin Kaiser re-reported the vulnerability to Broadcom, seeking a definitive resolution. Broadcom merely referred back to the insufficient 2018 patch, refusing to provide further remediation. When contacted, device manufacturers also failed to offer any functional solutions, indicating that neither the chip designer nor the hardware vendors intend to act.
5Ineffectiveness of Standard Mitigations
Users typically attempt to secure routers by disabling the Wi-Fi Protected Setup feature. However, Kaiser warns that this action is insufficient to mitigate the WPSplinter threat. Attackers can still exploit the vulnerability to gain unauthorized access, rendering standard user-level configuration changes ineffective against this specific deep-seated software flaw in Broadcom chips.
6Lack of Transparency for Users
There is currently no comprehensive list of affected router models, complicating efforts for users to identify their risk level. This opacity makes it nearly impossible for consumers to verify if their specific hardware is vulnerable. Without official guidance, users remain in the dark regarding the security status of their home or office networks.
7Limited Remediation Options Available
Since no software patch exists, users are left with extremely limited options to protect their devices. The only suggested course of action is contacting manufacturer support directly to request information. Users must specify their exact router model and year of manufacture to receive any potentially relevant, albeit likely limited, technical guidance from vendors.
8Systemic Industry Security Risks
This situation highlights a severe breakdown in the hardware supply chain security lifecycle. When critical vulnerabilities remain unpatched for 16 years due to finger-pointing between chip designers and equipment manufacturers, the entire ecosystem suffers. This case serves as a stark reminder of the persistent risks inherent in legacy networking firmware and software.