ZBT

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 27, 2026
Last mentionedSep 8, 2026

Timeline

3 articles · newest first

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

VulnCheck discloses two factory implants, SPEAKINGSTONE and DARKLANTERN, in ZBT router firmware granting unauthenticated remote attackers root command execution.

The Hacker NewsSep 8, 15:59 UTC · Sep 8, 2026VulnerabilityExploitedCVE-2026-74232 CVE-2026-74233 CVE-2026-667471 · 1 read

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off

Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.

The Hacker NewsSep 1, 16:45 UTC · Sep 1, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-82078 CVE-2026-74232+24 · 1 read

Chinese Routers Sold Worldwide Contain Backdoors

Manufacturer-built backdoor implants were found in ZBT white-label routers sold worldwide, exposing affected devices to potential unauthorized access.

Dark ReadingAug 27, 19:31 UTC · Aug 27, 2026Vulnerability2

Related CVEs

by mentions

CVE-2026-742333%9.3
Unauthenticated Root Command Injection in Zbtlink (ZBT) Router infosrvd Service
published Aug 27, 2026Zbtlink WE1326
CVE-2026-74232<1%9.3
Backdoor implant in Zbtlink and MoreQuick routers allows unauthenticated root access
published Aug 27, 2026Zbtlink L3_V2_8
CVE-2026-66747<1%9.3
Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line
published Aug 5, 2026
CVE-2026-8207861%9.4
Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
published Aug 28, 2026PaperCut NGKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV

Appears with

VulnCheckvendor · 2
Hugging Facevictim · 1
Huntressvendor · 1
QScanproduct · 1
FBIorganization · 1
ZBT routersproduct · 1
SPEAKINGSTONEproduct · 1
UNC3886threat actor · 1
QTFYthreat actor · 1
ENDLESSDOORSmalware · 1
QTRouterproduct · 1
TacTapmalware · 1
PaperCutproduct · 1
Shenzhen Zhibotong Electronicsvendor · 1
OpenAIorganization · 1
BridgeAgentmalware · 1

Entities are extracted by the model from each article. First seen Aug 27, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.