Brand profile · models not graded yet

Is Sagemcom Safe?

Sagemcom is a privately held French maker of ISP gateways. Its US FAST gateways hold FCC Conditional Approvals. Ownership, CVEs and updates explained.

Security Verdict

Sagemcom is a privately held French company that makes internet gateways supplied by ISPs such as Frontier. It is majority owned by UK private equity firm Charterhouse, with employees and management holding about 30%. None of its vulnerabilities are on CISA's exploited list, but its F5380 gateway was among more than 600,000 routers destroyed by malware at one US ISP in October 2023. Its US FAST gateways hold FCC Conditional Approvals, and there is no public security advisory page, so updates depend largely on your ISP.

Bottom line: Sagemcom gateways are ISP equipment, so your ISP decides when firmware is updated. Ask your ISP whether your model is still supported.

From the team behind this checker

Weighing up Sagemcom? See the router that scores an A on this same method.

SecureRooms. Smart devices live apart from your computers.
You approve every new device before it joins.
Rio VPN built in. First year included.
Set up in about 10 minutes from the app.

See Rio Router →

$199.99 · 1 year of VPN included, then $7.99/mo · 30-day returns · 1-year warranty. Rio builds this site, and its router is graded by the same method as every other.

Corporate Ownership Structure

Sagemcom is a French company headquartered in Bois-Colombes, France, with a US entity named Sagemcom USA, LLC. Charterhouse Capital Partners has held a majority since 2016, now through a continuation fund led by AlpInvest Partners (July 2023), and employees and management hold about 30%. No state ownership was found.

Key Risk Factors

Gateway model destroyed in a 2023 malware attack

Lumen reported in May 2024 that Chalubo malware on more than 600,000 routers at a single US ISP was followed by a destructive firmware update in October 2023. The Sagemcom F5380 was among the affected models. How attackers got in was not determined.

No public security advisory page

No public security advisory page or product security team was found on sagemcom.com. Update cadence, end-of-life policy and automatic updates are not publicly confirmed.

ISP controls firmware

Sagemcom gateways are supplied by ISPs, such as Frontier, so the ISP typically decides when firmware is updated, not the user.

No flaws on CISA's exploited list

No Sagemcom vulnerability is in the CISA Known Exploited Vulnerabilities catalog as of October 2026.

FCC Conditional Approvals for US FAST models

The FCC granted Sagemcom USA Conditional Approvals for its FAST3994, FAST3897, FAST5698, FAST5699 and FAST5999 routers and its FAST class of gateways and routers, valid through December 5, 2027.

Known CVEs - Sagemcom Routers

The following vulnerabilities from the NIST National Vulnerability Database affect Sagemcom router models. This is a representative sample; the full CVE list may be longer.

CVE-2025-29329 Critical (CVSS 9.8)

Buffer overflow in the print service of a Magyar Telekom variant of the F@st 3686 gateway.

CVE-2024-1623 High (CVSS 7.7)

Session timeout flaw in the Vodafone FAST3686 V2 router.

Frequently Asked Questions

Is Sagemcom router safe?

Sagemcom has no vulnerabilities on CISA's exploited list, but its F5380 gateway was among the routers destroyed in a 2023 malware attack on one US ISP. Because Sagemcom gateways are ISP equipment and the company has no public advisory page, your safety depends heavily on how well your ISP keeps firmware updated.

Who makes Sagemcom routers?

Sagemcom, formerly Sagem Communications, a French company based in Bois-Colombes, near Paris. It is privately held, majority owned by UK private equity firm Charterhouse Capital Partners since 2016, with employees and management holding about 30%. No state ownership was found.

Is Sagemcom banned in the US?

No. Sagemcom is not named on the FCC Covered List. Under the March 2026 rule on foreign-produced routers, the FCC granted Sagemcom USA Conditional Approvals for several FAST gateway models and its FAST gateway class, so new FAST models can be authorized through December 5, 2027.

Where are Sagemcom routers made?

Sagemcom says its products are designed and manufactured by its teams worldwide, and the French Treasury reported in 2023 that it makes internet boxes in Tunisia. The factory for specific US gateway models is not publicly confirmed.

Does Sagemcom get security updates?

Sagemcom gateways are supplied by ISPs, and the ISP typically manages firmware. Sagemcom has no public security advisory page, and its update cadence and end-of-life policy are not publicly confirmed. Ask your ISP whether your model is still supported.