16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password
2026-10-19T02:51:38Z•1980541977da97cf43c6b9f278e4836c926208bf04a61b74509c1722c99ef7bf
AI securityBeyondTrustBroadcomCISA KEVCikaBika BotDiscord C2FortinetIoT securityNgrokNorth KoreaWi-Fiactive exploitationdata breachmalwarerouter securityunauthenticated RCE
What happened
Security Affairs RSS feed covering a 16-year-old Broadcom Wi-Fi SDK vulnerability enabling unauthenticated remote code execution on nearby vulnerable routers, malware campaigns including the Rust-based CikaBika Bot, actively exploited Fortinet and BeyondTrust flaws added to CISA KEV, major data breaches, North Korean fake IT worker activity, and unauthorized AI-agent access incidents.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 1980541977da97cf43c6b9f278e4836c926208bf04a61b74509c1722c99ef7bf
- Enrichment time
- 2026-10-19T02:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.