A wardriving assessment across three Mexican host cities for the 2026 World Cup revealed significant wireless security risks, including high rates of vulnerable WPS configurations on otherwise secure WPA2/WPA3 networks. The prevalence of open networks, default SSID naming conventions, and BSSID exposure increases the attack surface for passive reconnaissance, rogue access point deployment, and adversary-in-the-middle attacks.