Movistar told customers in Spain they did not need to change router settings or replace their equipment, according to a report published by Xataka on October 28, 2026. The operator said any necessary protections would be managed centrally and that no equipment had been compromised by that point. Quentin Kaiser’s named demonstrations involved Belgian ISP gateways; a separate list associated four models with Movistar in Spain.
Movistar’s guidance to customers in Spain
Xataka reported that Movistar advised customers not to change their router settings or replace their equipment. The operator said its teams would handle any protective or corrective measures centrally. Xataka also reported Movistar’s statement that no equipment had been compromised as of its report.
For background, see NeoTeo’s earlier coverage of Movistar’s response.
What Kaiser described and demonstrated
The flaw Quentin Kaiser described affects Broadcom’s proprietary implementation of Wi-Fi Protected Setup (WPS). Kaiser says an attacker within Wi-Fi range can trigger it without the network key or completing normal WPS enrollment. He describes the effects as memory disclosure and arbitrary code execution. Kaiser’s technical account names demonstrations on Belgian ISP gateways, including the Orange Belgium ASKEY TCG3000 and Proximus BBOX3V+. He reports successful demonstrations involving three of the four Belgian providers he examined.
Four models associated with Movistar in Spain
Xataka’s Spain-focused list associates Comtrend VG8050, ZTE F680 v4, MitraStar GPT-2541GNAC, and Askey RTF3505VW with Movistar. These are the models in the Spanish operator list; Kaiser’s named demonstrations were on Belgian gateways.
