As cited
Copy frozen at (site build).
vulnerabilities
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck disclosed two previously undocumented factory implants in ZBT router firmware that allow unauthenticated remote attackers to execute commands as root. The vulnerabilities, CVE-2026-74232 and CVE-2026-74233, are named SPEAKINGSTONE and DARKLANTERN respectively.
Why it matters: Organizations using ZBT routers face immediate risk of unauthorized device takeover without credentials; verify if affected models are deployed and apply firmware updates or isolate devices pending patches.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck disclosed two previously undocumented factory implants in ZBT router firmware that allow unauthenticated remote attackers to execute commands as root. The vulnerabilities, CVE-2026-74232 and CVE-2026-74233, are named SPEAKINGSTONE and DARKLANTERN respectively.
Why it matters: Organizations using ZBT routers face immediate risk of unauthorized device takeover without credentials; verify if affected models are deployed and apply firmware updates or isolate devices pending patches.
- Source published
- First seen by Cybersecurity Tracker