China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-28 10:58 UTC
  • Importiert: 2026-09-04 07:47 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 69ea1ece9a2b724b3d71b9bab5d159359b76ac57f7a0f0e7fcffa31482e9fd71
The Hacker News

Inhalt

VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.

The implants, named SPEAKINGSTONE and DARKLANTERN by the company's zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-74232

CRITICAL

9.8

CRITICAL

9.8

2026-08-27

CVE-2026-74233

CRITICAL

9.8

CRITICAL

9.8

2026-08-27

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste