Connectivity Intel: Peplink 8.6.1 Beta, NetCloud Outage, KEV

Welcome to this week’s Connectivity Intel roundup, covering September 7 to 14, 2026. It was a busy week for cloud management platforms and router security: Peplink shipped a beta with three security fixes, Cradlepoint’s NetCloud went dark for a planned 10-hour window, MikroTik routers landed on CISA’s exploited list, and AT&T quietly raised Internet Air pricing again. Here is what matters for anyone running cellular, satellite, or bonded WAN in the field.

The Big Three Stories

1. Peplink Router Firmware 8.6.1 Beta 1 lands with three security advisories

Peplink posted Router Firmware 8.6.1 Beta 1 on September 11. It is a consolidation build with 17 improvements, 39 fixes, and 3 security advisories covering DHCP client hostname handling, Web Admin access control, and the management CLI, plus API-RCE hardening. No CVE IDs have been assigned yet. New capabilities include cellular IPv6 (not on 5GD/5GK modems), a Starlink RF inhibit option, Synergy Mode without a license, and LAN access to the Starlink Dish API without a Care plan. DNS-O-Matic support was removed.

Early feedback is mixed. One user reports an “Invalid Storage” error when installing on a BR1 Pro 5G and Balance 380 (ticket 26090521), and WINS cannot be enabled through InControl2 on the beta. The 8.6.0 fragmented-UDP tunnel bug that breaks RADIUS EAP-TLS and SIP over SpeedFusion is still the reason many admins are holding on 8.5.4 or 8.5.5 in production. Full notes are in the release notes PDF and the beta thread.

Also on the Peplink side this week: InControl2 threw 502 errors for about 15 minutes on September 8 with a brief recurrence that afternoon (false up/down statuses), a scheduled maintenance window for the Peplink eSIM data service runs September 16 from 14:00 to 17:00 UTC, and integrators are reporting unannounced Captive Portal behavior changes (special characters in usernames rejected, API insert now overwriting existing accounts) that have not yet received an official response.

2. Cradlepoint NetCloud planned outage: 10 hours on Saturday

Ericsson Cradlepoint ran a major NetCloud us0 maintenance on Saturday, September 12, from 08:00 to 18:00 MDT. During the window NetCloud logins failed with “incorrect login” errors. A follow-on incident, “Endpoints Reconnecting to Service After Maintenance,” ran until 02:10 MDT September 13 while devices re-registered and online status was inaccurate. Routers kept passing traffic; only management was affected. All systems show operational on the Cradlepoint status page as of Monday morning. The newest NetCloud OS release notes remain 7.26.80 FR1 from August; no September NCOS drop yet.

3. MikroTik “MikroTrick” hits CISA KEV, plus Cisco, Fortinet, SonicWall exploits

CISA added two MikroTik RouterOS flaws to the Known Exploited Vulnerabilities catalog on September 10: CVE-2026-67277 (CVSS 8.8, missing auth in btest) and CVE-2026-86060 (CVSS 9.2, argument-delimiter injection to privilege escalation). CERT Polska observed unauthenticated full takeovers of internet-exposed SSH since at least September 2, with attackers creating an “ops” admin account. Fixed builds are RouterOS 6.49.21, 7.23.5, and 7.24.2. Details are on the MikroTik advisory page.

The same week, CISA flagged Cisco Secure Firewall Management Center CVE-2026-20079 (CVSS 10.0 auth bypass, exploited since August and now linked to Qilin ransomware), Citrix NetScaler CVE-2026-19490 (CVSS 9.3), and FortiOS CVE-2025-25249 (a “PivotC2” RAT campaign has infected roughly 178 FortiGate devices, mostly in the US). SonicWall SMA 1000 zero-days CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 remain under active exploitation. If you have any of these on the edge, patch first and read later.

Firmware & Security Watch

• Teltonika: Teltonika RutOS 7.25.1 shipped September 4 and adds a Zabbix agent package (documentation is still catching up). Community threads to watch: TRB500 units stuck in a boot loop after upgrading to 7.24.3 stable, TRB501 modem firmware RG520N-EB A02 fixing crashes but cutting throughput for some users, and RUTX50 intermittent IPv4 loss on 5G NSA that has survived multiple firmware versions. Test on a bench unit before fleet-wide pushes.
• Semtech / Sierra Wireless: Low volume on the Semtech / Sierra Wireless forum this week: an RV50X 4.9.3 download link is broken on the legacy source page and AirVantage returned “Forbidden” for at least one user. Reminder: legacy ALEOS FIPS 140-2 validations move to the CMVP Historical List on September 21. AirLink OS 6.1 carries the FIPS 140-3 path.
• Digi: Quiet week. Digi has no new DAL OS or Remote Manager release in September; 26.2.x LTS remains current and the Cellular Routers forum has been silent since mid-August.
• Inseego: No product or firmware news for Inseego this week. The MiFi PRO M4 multi-carrier version (July) is still the latest hotspot news; the Nokia FWA acquisition is expected to close in Q4.
• Katalyst: Nothing new from Katalyst this week; it remains “Too New to Rate” on the RouterCVE report card with a single historical CVE.
• Other edge devices: D-Link DIR-878 CVE-2026-90692/90693 (CVSS 9.9), Totolink and Tenda criticals, HPE ArubaOS-CX CVE-2026-73749, and a pre-auth SNMPv3 information leak affecting roughly 470,000 exposed routers, switches, and firewalls.

RouterCVE Report Card

This is the baseline week for our tracked RouterCVE report card snapshot, so no diffs yet. Current standings for 5Gstore brands: Peplink A+ (Stable, 1 CVE in 12 months), Cradlepoint A+ (Stable, 0), Digi A+ (Getting Better, 2), Inseego A+ (Stable, 0), Starlink A+ (Stable, 1 in the last 30 days), Teltonika A (Getting Worse, 3), Semtech A- (Getting Worse, 2 in the last 30 days). On the migration-source side, Cisco is at F with 31 new CVEs in 30 days, Ubiquiti F- with 22, TRENDnet F- with 16, ASUS D- with 14, Fortinet F- with 11, and TP-Link F- with 9. Grade and trend changes will be called out starting next week.

Spectrum & Industry

• AT&T Internet Air price increase: Accounts activated before October 2025 will see a $5 per month increase effective September 28, the second $5 bump in six weeks. Disclosure came through the online billing center rather than a mailed notice. AT&T also had a September 7 outage centered on Dallas-Fort Worth and Houston (about 5,900 Downdetector reports, more than 40 percent citing Internet Air), traced to a fiber equipment issue and restored the same evening.
• AT&T Business resells Amazon Leo: AT&T is the first US carrier to offer Amazon Leo LEO satellite broadband as a managed service alongside fiber and 5G, targeting mining, energy, agriculture, construction, logistics, and backup connectivity. Pricing and availability are “in the coming months.”
• Starlink Router 4: Announced September 9, this is the first Starlink router with a Wi-Fi 7 chipset (2.4 and 5 GHz only, no 6 GHz), up to 3,500 sq ft, 510 devices, two Ethernet ports, and an IP56 rating. No price or ship date. US plan pricing is unchanged since June. SpaceX says V3 satellites with 10x capacity launch later this month. See the Starlink specs page for current hardware.
• Verizon: A multi-billion dollar Corning fiber supply deal for 2027 to 2032, churn declining year over year, and 2026 capex guidance of $16 to 16.5 billion. Note that the Verizon Community forum has been retired and now redirects to verizon.com/support. No 5G Home Internet price changes.
• T-Mobile: Pre-positioned crews, generators, and satellite backhaul across Hawaii ahead of Hurricane Lowell. No Home Internet plan or pricing changes. Community threads are the usual gateway DHCP leakage and bridge-mode requests.
• FCC: On September 9 the Public Safety and Homeland Security Bureau issued DA 26-957 granting new conditional approvals exempting specific foreign-produced routers and robotic devices from the Covered List (the notice PDF names the vendors; see the FCC document page). Comments closed September 8 on the Third FNPRM that would bar authorization of any device containing a Covered List component and add term limits and bills of materials to equipment authorizations; replies are due September 28. The September 30 open meeting agenda covers satellite spectrum (12.7 and 42 GHz), UWB rule updates, and NEPA reform, with no router-specific items. Upper C-band auction bidding procedure replies also closed September 8; the auction starts April 2027.

5Gstore Take

Two lessons from this week. First, cloud management planes fail independently of the data plane. InControl2’s 502s and NetCloud’s 10-hour window did not take routers offline, but they did take away visibility and remote hands right when admins wanted them. If you rely on remote access for a fleet, keep a documented out-of-band path (a second LTE line, a console server, or a SpeedFusion hub you control) and test it.

Second, the exploited-flaw list is dominated by the same edge vendors every week. The MikroTik, Cisco, Fortinet, SonicWall, and Citrix items above are all remote, unauthenticated or near-unauthenticated, and actively used. Compare that with the report card standings for Peplink, Cradlepoint, Digi, and Inseego, all sitting at A+. If you are still fronting a site with a consumer or legacy edge appliance, this is the week to price a migration.

On the Peplink beta: 8.6.1b1 is worth a lab install for the security fixes and the Starlink API access, but hold production on 8.5.x until the fragmented-UDP issue is confirmed gone in GA. Need help planning firmware rollouts, a NetCloud or InControl2 out-of-band strategy, or a migration off an F-grade vendor? Contact the 5Gstore team and we will map it out with you.

FAQ

Should I install Peplink 8.6.1 Beta 1 on production routers?
Not yet. Run it in a lab to test the security fixes and the Starlink Dish API access, then wait for the GA release and confirm the fragmented-UDP tunnel bug from 8.6.0 is resolved before rolling it out to sites that carry RADIUS or SIP traffic over SpeedFusion.

Did the Cradlepoint NetCloud maintenance take routers offline?
No. Routers continued to pass traffic. The 10-hour window on September 12 affected NetCloud logins, remote management, and online status accuracy only.

Which routers were affected by the MikroTik exploit?
Any MikroTik RouterOS device with SSH or the btest service reachable from the internet on an unpatched build. Update to RouterOS 6.49.21, 7.23.5, or 7.24.2 and audit for unexpected admin accounts.