FCC Adds Foreign-Produced Consumer Routers to FCC Covered List

The FCC’s Public Safety and Homeland Security Bureau added all routers produced in foreign countries to the Covered List. When an item is placed on the covered list it is deemed an unacceptable US security risk. Routers were “directly implicated” in attacks (e.g. Volt/Flax/Salt Typhoon) targeting U.S. communications, energy, transportation, and water infrastructure. Further information on the risks are contained in the FCC Public Notice, DA-26-278A1.

Effective March 23, 2026, routers produced in a foreign country are prohibited from receiving new FCC equipment authorizations. For routers produced in the United States, applicants must formally certify that the equipment is not 'covered'. Note that this restriction is determined strictly by the place of production, including design, development, and assembly rather than the manufacturer's corporate identity.

Existing authorizations for covered routers remain valid unless revoked or limited by the FCC; however, modifications including Class I permissive changes—are generally prohibited. To ensure device security and functionality, the Office of Engineering and Technology (OET) issued a Blanket Waiver (DA 26-286). This waiver permits critical firmware and software updates, such as vulnerability patches and operating system compatibility fixes, through at least March 1, 2027.

A Conditional Approval procedure is available to applicants seeking to maintain FCC authorization while mitigating national security concerns. To obtain approval from the Department of War (DoW) or the Department of Homeland Security (DHS), applicants must provide comprehensive disclosures for an individualized assessment of potential risks:

• Full supply chain disclosure
• Ownership and governance transparency
• Component origin details
• Cybersecurity posture
• A plan to transition production to trusted locations

Submit Conditional Approval requests for foreign-produced routers to conditional-approvals@fcc.gov and UAS requests to drones@fcc.gov. If approved, the authorization remains valid for up to one year.

Here are some FAQs from the FCC website on Recent Updates to FCC Covered List Regarding Routers Produced in Foreign Countries.

If you have any questions, please contact us here.