FCC Delays Software Update Ban for Foreign-Made Routers Amid Supply Chain Concerns

Initial Ban on Foreign Routers

In March 2026, the FCC implemented a ban on all international home internet routers. This decision was based on a National Security Determination citing how "malicious actors have exploited security gaps in foreign-made routers to attack American households, disrupt networks, enable espionage, and facilitate intellectual property theft." The ban was intended to prevent foreign intelligence agencies and hackers from accessing American networks through backdoors in foreign-manufactured products.

Software Update Restrictions

As part of the initial ruling, companies were prohibited from providing software updates to existing foreign-made routers after 2027. This measure was designed to further secure American networks by limiting potential vulnerabilities in devices with overseas components, assembly, or designs. The Trump administration had pushed for these stringent restrictions to establish independent supply chains for core components.

FCC Grants Waiver for Software Updates

The FCC has now issued a public notice allowing routers to "continue to receive software and firmware updates that mitigate harm to U.S. consumers" until at least January 1, 2029. This revision comes after the National Consumer Technology Association advocated for relaxing the ruling, citing supply chain shortages in "critical substrate material and memory modules" that could lead to widespread disruptions in American broadband services.

Industry Concerns and Impact

Critics of the original ban highlighted that prohibiting software updates could inadvertently create more security risks than it solves, as unpatched vulnerabilities would remain. The reliance of the American router market on international partners, particularly from Southeast Asia, makes a wholly domestic supply chain challenging to achieve, indicating the complexities of implementing such restrictions.