Movistar España said on October 19, 2026, that a vulnerability involving Broadcom could affect some router models. The operator said it was following guidance to address the issue and knew of no active attacks using it. The statement names no specific router model.
What Movistar said about the issue
In its October 19 post, Movistar España described the vulnerability in general terms and said it was following instructions to resolve it. On October 21, 2026, OKDIARIO reported that Movistar was applying preventive measures automatically and that customers did not need to take action.
OKDIARIO described a possible attack by someone within a router’s wireless range, potentially allowing code execution with elevated privileges without prior authentication. The outlet said exposure depended on the router model and software version.
How the separate WPS disclosure fits
Quentin Kaiser separately described a Broadcom flaw in processing Wi-Fi Protected Setup (WPS) messages. His disclosure says the flaw can be triggered over Wi-Fi without the network key or completing normal WPS enrollment, and can allow information disclosure or arbitrary code execution. Movistar’s statement does not identify its issue as that WPS flaw.
NeoTeo previously covered Kaiser’s Broadcom WPS router disclosure.
