US bans imported routers
The FCC has banned all new imported routers, citing security risks and links to recent state‑sponsored hacking campaigns — a blunt supply‑chain move that will affect networking, IoT, and cloud projects. That regulatory shift raises the profile of secure configuration and third‑party risk assessments in engineering portfolios. (morningbrew.com)
The FCC formally updated its Covered List on March 23, 2026, adding “consumer‑grade routers produced in foreign countries” and publishing the change in its DA‑26‑278 public notice. (docs.fcc.gov) The agency’s update bars those foreign‑produced models from receiving new FCC equipment authorizations, which in practice prevents legal importation, marketing, or sale of new models in the U.S. without an exemption. (docs.fcc.gov) The White House‑convened National Security Determination cited by the FCC said compromised foreign‑produced routers were “directly implicated” in the Volt, Flax and Salt Typhoon campaigns that targeted U.S. communications, energy, transportation and water infrastructure. (docs.fcc.gov) Manufacturers may apply for a Conditional Approval pathway but the FCC noted exemptions need sign‑off from national security agencies such as the Departments of Defense or Homeland Security. (techcrunch.com) The FCC’s Office of Engineering and Technology issued a blanket waiver permitting critical firmware and software updates to previously authorized devices even as new authorizations are blocked. (wiley.law) Reporting names major consumer brands that build routers overseas — TP‑Link, Netgear, Asus, Linksys, Amazon Eero and others — and Reuters estimates devices made in China account for roughly 60% of the U.S. home‑router market. (pcmag.com) The order preserves existing FCC authorizations and allows retailers to sell previously approved inventory, while generally prohibiting hardware changes to already‑authorized models except where expressly allowed. (wiley.law)
