The article estimates the number of these routers in the author's home country (Belgium), but the vulnerability would exist in units sold worldwide, no? Seems to me that their estimates of affected units are a couple orders of magnitude low.
simoncion•52m ago
> The article estimates the number of these routers in the author's home country (Belgium), but the vulnerability would exist in units sold worldwide, no?
It seems like the author is aware of the undercount, no?
FTFA:
> [This issue] affects dozens of vendors, hundreds of products, and millions of Broadcom-based access points worldwide. In an effort to discover all affected vendors and devices, I’m providing a fingerprinting script and YARA rule so you can help me document the blast radius.
> ...
> I demonstrated that the vulnerability is present and exploitable on 3 out of 4 Belgian Internet Service Providers including Proximus (BBOX 3V+), VOO (Netgear CG3100, Netgear CG3700, Technicolor 7210, CGA4233) and Orange (ASKEY TCG3000). Telenet may be affected through Sagemcom F@st devices, but I could not get my hands on one.
> As of October 15th, 2026, none of these affected devices have been patched. This means you can get a root shell from across the street on a significant proportion of routers in Belgium, and probably elsewhere.
> ...
> I did some napkin math with my friend Sol using data published by the IBPT and public communication from the ISPs about model release over the years. I have medium confidence in these numbers; hopefully the ISPs will start communicating about the exact number of affected devices once this hits the Internet. [A table that contains guestimates of number of affected subscribers from the four Belgian ISPs mentioned above follows.]
> ...
> And this is *not* limited to Belgium. Affected manufacturers serve a larger market.
userbinator•32m ago
unless affected Original Equipment Manufacturers (OEMs) are willing to migrate.
...or someone spends a bit of time with an AI to come up with a patch? Bonus points for one that can be remotely installed using the same exploit...
myself248•8h ago
simoncion•52m ago
It seems like the author is aware of the undercount, no?
FTFA:
> [This issue] affects dozens of vendors, hundreds of products, and millions of Broadcom-based access points worldwide. In an effort to discover all affected vendors and devices, I’m providing a fingerprinting script and YARA rule so you can help me document the blast radius.
> ...
> I demonstrated that the vulnerability is present and exploitable on 3 out of 4 Belgian Internet Service Providers including Proximus (BBOX 3V+), VOO (Netgear CG3100, Netgear CG3700, Technicolor 7210, CGA4233) and Orange (ASKEY TCG3000). Telenet may be affected through Sagemcom F@st devices, but I could not get my hands on one.
> As of October 15th, 2026, none of these affected devices have been patched. This means you can get a root shell from across the street on a significant proportion of routers in Belgium, and probably elsewhere.
> ...
> I did some napkin math with my friend Sol using data published by the IBPT and public communication from the ISPs about model release over the years. I have medium confidence in these numbers; hopefully the ISPs will start communicating about the exact number of affected devices once this hits the Internet. [A table that contains guestimates of number of affected subscribers from the four Belgian ISPs mentioned above follows.]
> ...
> And this is *not* limited to Belgium. Affected manufacturers serve a larger market.