“We’re practically talking the very things we don’t want into existence.”

A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability research, exploitation across eCos and Linux platforms, its impact on the global router supply chain, and a disclosure process rather … interesting.