WPSplinter Router Flaw Report Leaves Owners Without a Full Model List

The Short Version

Security researcher Quentin Kaiser has published findings about a 16-year-old router vulnerability, PCWorld reports. Called WPSplinter, the flaw lies in Broadcom’s Wi-Fi Protected Setup software and could allow attackers to run malicious code and take control of affected devices.

Why It Matters

The immediate difficulty for owners is identifying whether their router is affected. PCWorld says no complete model list is available. Its references to several manufacturers therefore should not be read as evidence that every router from those brands is vulnerable.

According to Kaiser, simply turning off WPS does not prevent exploitation on affected models. That makes it especially important to distinguish a familiar setting change from a demonstrated fix.

The Bigger Picture

PCWorld describes a partial Broadcom patch released in 2018 and says Kaiser raised the issue again in July 2026. The report says Broadcom referred back to its earlier patch, while manufacturers contacted could not provide a solution.

The account illustrates a support question: a component supplier’s update and a complete resolution for a finished router are different milestones. An owner needs information that applies to the particular device and its software.

What to Watch

A model-by-model advisory, affected firmware versions and verified remediation details would make the warning more actionable. The supplied account does not establish those specifics or the proximity an attacker would need.

For now, PCWorld suggests asking support for information tied to the router’s model and year of manufacture. That is a request for clarity, not a guarantee that a remedy is available.

How easy is it to find clear security-support information for the router you use?