Grade F · High Risk

Is Xiaomi Router Safe?

Xiaomi routers are Chinese-owned with limited US FCC authorization and no US security support. F grade. New models blocked. Full analysis.

Last reviewed: March 2026 · ismyroutersafe.com

Ownership & FCC Status
Owner
Chinese-owned (Beijing Xiaomi Mobile Software)
FCC Status
Limited US authorization; new models blocked
Ban Status
New models blocked
Manufacturing
China
Models in DB
1 analyzed
Grade Range
F

Security Verdict

Xiaomi is a Chinese company (Beijing Xiaomi Mobile Software Co., Ltd.) with limited FCC authorization for its router products in the US market. New Xiaomi router models face the same FCC authorization block as other Chinese-owned brands. Xiaomi has minimal US security support presence, and its routers are subject to China's National Intelligence Law. Xiaomi routers are primarily designed for Asian markets and have limited firmware support in the US.

Bottom line: Replace. Chinese-owned, limited US support, new models blocked from FCC authorization.

Corporate Ownership Structure

Xiaomi Corporation is publicly traded on the Hong Kong Stock Exchange (HKEX: 1810). Founder and chairman Lei Jun holds significant voting power through a dual-class share structure. Chinese state capital is present through indirect fund holdings in Xiaomi's shareholder base. Xiaomi's router division (branded as Mi Router) is subject to the same National Intelligence Law obligations as other Chinese technology companies.

Xiaomi Models - Security Grades

All Xiaomi models in our database. Click a model for its full security report.

Model Grade FCC Status Security Support Made In
AX3000T F Limited US authorization Minimal US support China

Key Risk Factors

Chinese ownership
Xiaomi is subject to China's National Intelligence Law. The company has no separation between corporate operations and Chinese government intelligence obligations.
Minimal US firmware support
Xiaomi routers are primarily designed for Asian markets. US firmware support is limited and inconsistent.
New models blocked
New Xiaomi networking models cannot receive FCC authorization as of 2026.

Known CVEs - Xiaomi Routers

The following vulnerabilities from the NIST National Vulnerability Database affect Xiaomi router models. This is a representative sample; the full CVE list may be longer.

CVE-2019-18371 Critical (CVSS 9.8)
Pre-authentication heap overflow on the Mi WiFi R3G. A remote attacker with no credentials can execute arbitrary code on the router. Affects R3G firmware versions before 2.28.23.
CVE-2019-18370 Critical (CVSS 9.1)
Authentication bypass on Mi WiFi routers. Attackers can execute arbitrary commands as root with no valid credentials - full remote control without any login.

Frequently Asked Questions

No. Xiaomi is a Chinese-owned brand subject to China's National Intelligence Law. New models are blocked from FCC authorization. Minimal US security support means vulnerabilities may never be patched.

Xiaomi is not on the FCC Covered List in the same way as Huawei, but new Xiaomi networking equipment cannot receive FCC authorization as of 2026, effectively blocking new products from the US market.

CHECK YOUR SPECIFIC MODEL

Get your router's full security report

Check any specific model for CVEs, FCC status, security capabilities, and your personalized action plan.

Check a Router → Top 10 Safe Routers
A free public tool made with 🦾 by Rio