Router security patches in October 2026: keeping Starlink and Amazon Leo home and business networks safe

When people think about satellite broadband, they usually think about the dish: where it goes, what it can see and how fast it is. The part that gets far less attention is the router and the rest of the network behind it. Yet that is where most security problems start, and October 2026 has been a busy month for router security fixes.

In the space of a few weeks, NETGEAR, TP-Link, MikroTik and Peplink have all published security advisories and firmware updates for routers and related equipment. Several of these brands are common in UK homes and businesses, and some are widely used alongside Starlink in bypass mode. In this post we look at what was fixed, why older routers are becoming a genuine risk, and the practical steps that keep a Starlink or Amazon Leo network secure.

What was patched this month

NETGEAR's October 2026 security advisory covers a number of its Nighthawk routers, an Orbi cable router and two range extenders. The issues include an authentication bypass in some RAX series routers that could let an attacker with access to the management service read device information or change admin settings, an input validation flaw in the Block Sites feature of models such as the RAX30, and weak session randomness in two EX series extenders that could let someone already on the network hijack an admin login. NETGEAR rates them as medium severity and has released fixed firmware for supported models.

TP-Link published an advisory on 23 October for the Archer AX90 V1, rated 7.7 (High) on the CVSS v4 scale. It describes a command injection flaw in a service on the router that an unauthenticated attacker on the local network could use to run commands as root, which TP-Link says could result in complete device compromise. The fix is in firmware 1.1.14 Build 20260927.

MikroTik disclosed a stack buffer overflow in the SNMP service of RouterOS 7.20 and later on 20 October. SNMP is not enabled by default, but where it is turned on with the default community string, a single crafted request can crash the service. MikroTik has fixed it in RouterOS 7.24 (stable) and 7.23.3 (long-term), and advises disabling SNMP or restricting it to trusted addresses until devices are updated.

Peplink, whose Balance and MAX routers are popular for combining Starlink with mobile broadband, announced fixes on 23 October for two vulnerabilities affecting the InControl Virtual Appliance and Balance and MAX routers that use the Edge Computing feature. It has since confirmed firmware 8.4.0 to 8.6.1 is affected on those models, released firmware 8.6.1s042 and InControl Virtual Appliance 2.14.4, and said other models are not affected.

The bigger issue: routers that no longer get updates

One line in the NETGEAR advisory is worth reading twice. Several of the affected models are marked End-of-Support, and for some of them the fix is listed simply as "Won't Fix". NETGEAR says no security updates are planned for end-of-support models and strongly recommends retiring them and upgrading to a newer device.

This is not unique to one brand. Every router eventually stops receiving firmware, and many homes and small businesses are still running routers that are several years old. When a Starlink kit is installed, that older router is often kept and connected in bypass mode or as a secondary network, which means an unsupported device can end up sitting at the heart of an otherwise brand-new connection.

UK law has started to address this for new products. Since 29 April 2024, the Product Security and Telecommunications Infrastructure regime has required consumer connectable products, including routers, sold in the UK to meet baseline security rules. According to government guidance, these ban universal default and easily guessed passwords, require manufacturers to publish how to report security issues, and require them to publish a minimum period for which the product will receive security updates. That published support period is a useful thing to check before you buy.

What about the Starlink router itself?

Starlink handles software differently from most retail routers. Its help centre explains that updates are downloaded automatically in the background and applied during a reboot, by default at around 3am local time, plus or minus 30 minutes. You can change the update window to overnight, morning, afternoon or evening in the Starlink app under Settings, Starlink, Software Updates. Starlink says updates are generally released every two weeks, and update data does not count towards priority data limits.

The catch is that this only covers Starlink's own hardware. As soon as you put the Starlink router into bypass mode and use a third-party router, mesh system or firewall, the security of your network depends on that equipment and whether it is being kept up to date. The same principle will apply to Amazon Leo when it launches: the satellite link is only one part of the picture.

Practical steps for UK homes and businesses

None of this needs to be complicated. These are the checks we recommend for any satellite broadband network:

• Turn on automatic firmware updates wherever the router or mesh system supports them. NETGEAR notes that devices with automatic updates enabled may already have this month's fixes applied.

• Check the model and firmware version of every router, mesh node and range extender on the network, including older kit kept on after a Starlink install, and compare it with the manufacturer's latest release.

• Retire any device marked end-of-support or end-of-life. If the manufacturer has said it will not be fixed, no amount of configuration makes it safe long term.

• Change admin passwords from anything weak or shared, and use WPA3 or WPA2 Wi-Fi security with a strong passphrase.

• Switch off features you do not use, such as remote management from the internet, SNMP or UPnP, and keep management pages reachable only from the local network.

• Put guests, smart TVs, cameras and other smart devices on a separate guest network or VLAN, so a weak device cannot reach the computers and tills that matter.

• For businesses, keep a simple record of network equipment, firmware versions and support end dates, and review it a couple of times a year.

Why this matters more on satellite broadband

Satellite broadband users are often in rural homes, farms, holiday lets, workshops and remote business sites, where the network may also run CCTV, gate controls, alarm systems or a card machine. These are exactly the setups where a router is installed once and then forgotten for years, sometimes in an outbuilding or comms cabinet nobody looks at. A well-designed network makes updates automatic, keeps the management side locked down and separates the devices that matter from the ones that do not.

Secure installations from Space Internet Solutions

Space Internet Solutions installs Starlink for homes and businesses and is preparing customers for Amazon Leo. Our installations cover more than the dish: we choose current, supported routers, mesh and switching equipment, set up automatic updates, secure admin access, configure guest and device networks, and leave you with a clear record of what is installed. Through our nationwide network of trusted PLEO (Professional Low Earth Orbit) installers, that same standard of work is available anywhere in the UK.

If you are worried about an older router on your satellite connection, or want a network that is secure from day one, talk to us. To book a survey, upgrade or installation with a trusted professional installer nationwide, visit spaceinternetsolutions.com.

Sources: NETGEAR October 2026 Security Advisory (updated 28 October 2026), TP-Link security advisory for the Archer AX90 (23 October 2026), MikroTik security notice for RouterOS SNMP (20 October 2026), Peplink security advisory on the PHP2Shell vulnerabilities (23 October 2026, updated 27 and 28 October), GOV.UK guidance on the consumer connectable product security regime, and the Starlink Help Center article on choosing when Starlink software updates.